| Package | Affected versions | Patched versions |
|---|---|---|
| fortiadc | ≥ 5.4.0, < 6.2.4 | 6.2.4 |
| fortiauthenticator | ≥ 6.3.0, < 6.3.4≥ 6.4.0, < 6.4.2 | 6.3.46.4.2 |
| fortiddos | ≥ 5.3.0, < 5.5.2 | 5.5.2 |
| fortiddos-f | ≥ 6.1.0, < 6.3.4 | 6.3.4 |
| fortimail | ≥ 6.4.0, < 7.0.4 | 7.0.4 |
| fortindr | = 7.2.0≥ 1.4.0, < 7.1.1 | 7.1.1 |
| fortiproxy | ≥ 2.0.0, < 7.0.5≥ 7.2.0, < 7.4.0 | 7.0.57.4.0 |
| fortirecorder | ≥ 6.0.0, < 6.0.11≥ 6.4.0, < 6.4.3 | 6.0.116.4.3 |
| fortisoar | ≥ 6.4.0, < 7.3.0 | 7.3.0 |
| fortitester | ≥ 3.7.0, < 7.2.2 | 7.2.2 |
| fortivoice | ≥ 6.0.0, < 6.4.9 | 6.4.9 |
| fortiwlc | ≥ 8.6.0, < 8.6.7 | 8.6.7 |
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free