CVE-2018-13384

Description

A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HTTP cache and subsequently redirect SSL VPN web portal users to arbitrary web domains.

Affected products

• fortinet / Fortinet FortiOSFortiOS all versions below 6.0.5 – FortiOS all versions below 6.0.5

References

• MISChttps://fortiguard.com/advisory/FG-IR-19-002