A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the Host header points to an arbitrary webserver
| Software | From | Fixed in |
|---|---|---|
| fortinet / fortios | 7.2.0 | 7.2.5 |
| fortinet / fortitester | 3.7.0 | 7.2.2 |
| fortinet / fortisoar | 6.4.0 | 7.3.0 |
| fortinet / fortiddos | 5.3.0 | 5.5.2 |
| fortinet / fortiddos-f | 6.1.0 | 6.3.4 |
| fortinet / fortirecorder | 6.4.0 | 6.4.3 |
| fortinet / fortirecorder | 6.0.0 | 6.0.11 |
| fortinet / fortiauthenticator | 6.3.0 | 6.3.4 |
| fortinet / fortiauthenticator | 6.4.0 | 6.4.2 |
| fortinet / fortivoice | 6.0.0 | 6.4.9 |
| fortinet / fortiswitch | 6.4.0 | 7.0.5 |
| fortinet / fortimail | 6.4.0 | 7.0.4 |
| fortinet / fortiproxy | 7.2.0 | 7.4.0 |
| fortinet / fortiproxy | 2.0.0 | 7.0.5 |
| fortinet / fortios | 6.0.0 | 7.0.6 |
| fortinet / fortiwlc | 8.6.0 | 8.6.7 |
| fortinet / fortiadc | 5.4.0 | 6.2.4 |
| fortinet / fortindr | 7.2.0 | 7.2.0.x |
| fortinet / fortindr | 1.4.0 | 7.1.1 |