← CVE Intelligence

CVE-2025-46777

Fortinet / FortiPortal PUBLISHED

Description (CNA)

A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.9 may allow an authenticated attacker with at least read-only admin permissions to view encrypted secrets via the FortiPortal System Log.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiPortalaffected 7.4.0; affected 7.2.0 through 7.2.5; affected 7.0.0 through 7.0.9

CWE

CWE-532

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.