CyberCVE

CVE-2025-46777

A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.9 may allow an authenticated attacker with at le

Severity
Low 2.2
CVSS 3.1
Exploited
Not listed
EPSS
0.002
14.9th percentile
Discovered by
Vendor
Vendor advisory field
Published
May 28, 2025
Assigned by fortinet

Description

A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.9 may allow an authenticated attacker with at least read-only admin permissions to view encrypted secrets via the FortiPortal System Log.

Weakness: CWE-532

Affected products

Vendor Product Category Matched by
Fortinet FortiPortal Network & Security Management cna-assigner
Vendor-reported products (1)
  • Fortinet · FortiPortal

Credit

Internally reported by Tim Morris from the Fortinet sales team.

Vendor remediation

Please upgrade to FortiPortal version 7.4.2 or above Please upgrade to FortiPortal version 7.4.1 or above Please upgrade to FortiPortal version 7.2.6 or above Please upgrade to FortiPortal version 7.0.10 or above

References

Something wrong here?