CVE-2025-54838

6.8MEDIUM

An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests.

Опубликовано: 12/9/2025Обновлено: 12/9/2025
Посмотреть на NVDПосмотреть на MITRE

Описание

An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests.

ИИ-АнализНа базе ИИ

Затронутые продукты

fortinetfortiportal

Ссылки