PT-2025-42467 · Fortinet · Fortidlp

Published 2025-10-14 · Updated 2025-10-16 · CVE-2025-46752

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Fortinet FortiDLP versions 11.4.5 through 12.0.5 Fortinet FortiDLP version 11.5.1 Fortinet FortiDLP version 11.4.6

Description A flaw exists in Fortinet FortiDLP that allows for the disclosure of sensitive information through the reuse of an enrollment code, resulting in the insertion of sensitive data into log files. This could potentially provide an attacker with a foothold for lateral movement within a network.

Recommendations Update Fortinet FortiDLP to a version later than 12.0.5. Update Fortinet FortiDLP to a version later than 11.5.1. Update Fortinet FortiDLP to a version later than 11.4.6.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2026-05222

CVE-2025-46752

Affected Products

Fortidlp

References · 7

• https://fortiguard.fortinet.com/psirt/FG-IR-25-160 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46752 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46752 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05222 · Security Note
• https://twitter.com/VulmonFeeds/status/1978849172062114027 · Twitter Post
• https://twitter.com/0dayPublishing/status/1978829346270801984 · Twitter Post
• https://twitter.com/CVEnew/status/1978926601757679865 · Twitter Post