CVE-2025-59810 — Fortinet / FortiSOAR on-premise

Description (CNA)

An improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow information disclosure to an authenticated attacker via crafted requests

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSOAR on-premise	affected 7.6.0 through 7.6.2; affected 7.5.0 through 7.5.1; affected 7.4.0 through 7.4.5; affected 7.3.0 through 7.3.3
Fortinet / FortiSOAR PaaS	affected 7.6.0 through 7.6.2; affected 7.5.0 through 7.5.1; affected 7.4.0 through 7.4.5; affected 7.3.0 through 7.3.3

CWE

CWE-284

References

https://fortiguard.fortinet.com/psirt/FG-IR-25-601

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.