Skip to content
OpenAdvisories
Unscored CVE-2018-13384 EUVD-2018-5328GHSA-rhph-5r83-p3mr

A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to p…

Published Jun 4, 2019 · Updated Oct 25, 2024 · Assigned by fortinet

Description

A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HTTP cache and subsequently redirect SSL VPN web portal users to arbitrary web domains.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiOS FortiOS all versions below 6.0.5 —

References