cve/2018/CVE-2018-13384.md

### [CVE-2018-13384](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13384)
![](https://img.shields.io/static/v1?label=Product&message=Fortinet%20FortiOS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Access%20Control&color=brighgreen)

### Description

A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HTTP cache and subsequently redirect SSL VPN web portal users to arbitrary web domains.

### POC

#### Reference
- https://fortiguard.com/advisory/FG-IR-19-002

#### Github
No PoCs found on GitHub currently.