CVE-2025-31514

2.7LOW

An Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an attacker

Publicado: 10/14/2025Actualizado: 10/15/2025
Ver en NVDVer en MITRE

Descripción

An Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an attacker with at least read-only privileges to retrieve sensitive 2FA-related information via observing logs or via diagnose command.

Análisis IAImpulsado por IA

Productos Afectados

fortinetfortios
fortinetfortiproxy

Referencias