CVE-2025-54838

6.8MEDIUM

An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests.

发布于: 12/9/2025更新于: 12/9/2025
在NVD查看在MITRE查看

描述

An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests.

AI分析AI驱动

受影响产品

fortinetfortiportal

参考资料