PT-2025-42467 · Fortinet · Fortidlp

Publicado 2025-10-14 · Atualizado 2025-10-16 · CVE-2025-46752

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Fortinet FortiDLP versions 11.4.5 through 12.0.5 Fortinet FortiDLP version 11.5.1 Fortinet FortiDLP version 11.4.6

Description A flaw exists in Fortinet FortiDLP that allows for the disclosure of sensitive information through the reuse of an enrollment code, resulting in the insertion of sensitive data into log files. This could potentially provide an attacker with a foothold for lateral movement within a network.

Recommendations Update Fortinet FortiDLP to a version later than 12.0.5. Update Fortinet FortiDLP to a version later than 11.5.1. Update Fortinet FortiDLP to a version later than 11.4.6.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

BDU:2026-05222

CVE-2025-46752

Produtos afetados

Fortidlp

Referências · 7

• https://twitter.com/VulmonFeeds/status/1978849172062114027 · Publicação no Twitter
• https://twitter.com/0dayPublishing/status/1978829346270801984 · Publicação no Twitter
• https://fortiguard.fortinet.com/psirt/FG-IR-25-160 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-46752 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-46752 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1978926601757679865 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-05222 · Nota de Segurança