CVE-2025-31514
2.7LOWAn Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an attacker
Veröffentlicht: 10/14/2025Aktualisiert: 10/15/2025
Beschreibung
An Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an attacker with at least read-only privileges to retrieve sensitive 2FA-related information via observing logs or via diagnose command.
KI-AnalyseKI-gestützt
Betroffene Produkte
fortinetfortios
fortinetfortiproxy
Referenzen
- https://fortiguard.fortinet.com/psirt/FG-IR-24-452Vendor Advisory