description: A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HTTP cache and subsequently redirect SSL VPN web portal users to arbitrary web domains.
problem types: Improper Access Control
affected:
{
product: Fortinet FortiOS
vendor: Fortinet
versions:
status: affected, version: FortiOS all versions below 6.0.5
}