CVE-2025-31514

2.7LOW

An Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an attacker

Veröffentlicht: 10/14/2025Aktualisiert: 10/15/2025

Beschreibung

An Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an attacker with at least read-only privileges to retrieve sensitive 2FA-related information via observing logs or via diagnose command.

KI-AnalyseKI-gestützt

Betroffene Produkte

fortinetfortios
fortinetfortiproxy

Referenzen