← CVE Intelligence

CVE-2025-64471

Fortinet / FortiWeb PUBLISHED

Description (CNA)

A use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an unauthenticated attacker to use the hash in place of the password to authenticate via crafted HTTP/HTTPS requests

Affected (CNA)

Vendor / productVersions
Fortinet / FortiWebaffected 8.0.0 through 8.0.1; affected 7.6.0 through 7.6.5; affected 7.4.0 through 7.4.10; affected 7.2.0 through 7.2.11; affected 7.0.0 through 7.0.11

CWE

CWE-836

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.