CVE-2020-15938

Name of the Vulnerable Software and Affected Versions FortiGate versions prior to 6.2.5 FortiGate versions prior to 6.4.2

Description The issue occurs when non-HTTP/S traffic, such as SSH traffic, passes through the FortiGate on ports 80/443. This traffic is not redirected to the transparent proxy policy for processing because it lacks a valid HTTP header.

Recommendations For versions prior to 6.2.5, update to version 6.2.5 or later to resolve the issue. For versions prior to 6.4.2, update to version 6.4.2 or later to resolve the issue.