PT-2025-47359 · Fortinet · Fortiadc

Published 2025-11-18 · Updated 2025-11-19 · CVE-2025-54971

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fortinet FortiADC versions 6.2 through 7.4.0

Description A flaw exists in Fortinet FortiADC that could allow an administrator with read-only permissions to access passwords for external resources through the product's logs. This could lead to sensitive information disclosure to an unauthorized actor.

Recommendations Fortinet FortiADC versions prior to 7.4.0 should be updated.

Fix

Information Disclosure

Insertion into Log File

Weakness Enumeration

CWE-200

CWE-532

Related Identifiers

BDU:2025-14863

CVE-2025-54971

Affected Products

Fortiadc

References · 7

• https://fortiguard.fortinet.com/psirt/FG-IR-25-686 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54971 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14863 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-54971 · Security Note
• https://twitter.com/VulmonFeeds/status/1990884728786800721 · Twitter Post
• https://t.me/CVEtracker/37638 · Telegram Post
• https://twitter.com/CVEnew/status/1991042970364027186 · Twitter Post