CyberRota Analysis
AI-GeneratedFortinet FortiOS and FortiProxy versions 7.2 through 7.6.4 are vulnerable to HTTP Response Splitting due to improper handling of CRLF sequences in HTTP headers. This flaw could allow an attacker to intercept and modify captive portal authentication requests, potentially leading to unauthorized access or data manipulation. Organizations using affected versions should prioritize remediation to mitigate the risk of exploitation.
Original NVD Description
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an attacker able to intercept and modify a user's captive portal authentication request to inject arbitrary headers via crafted HTTP requests.
Related CVEs
Other vulnerabilities affecting the same vendor(s)