PT-2025-47365 · Fortinet · Fortipam

Published 2025-11-18 · Updated 2025-11-19 · CVE-2025-61713

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions FortiPAM versions 1.0 through 1.6.0

Description A cleartext storage of sensitive information in memory issue exists in FortiPAM. An authenticated attacker with read-write administrative privileges to the command-line interface (CLI) may be able to obtain other administrators' credentials through the use of diagnose commands. This allows for potential lateral privilege escalation within a network.

Recommendations FortiPAM version 1.6.0 and earlier should be updated. FortiPAM versions 1.5, 1.4, 1.3, 1.2, and 1.1 should be updated.

Fix

Weakness Enumeration

CWE-316

Related Identifiers

BDU:2025-14873

CVE-2025-61713

Affected Products

Fortipam

References · 7

• https://osv.dev/vulnerability/CVE-2025-61713 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14873 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-25-789 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61713 · Security Note
• https://t.me/CVEtracker/37647 · Telegram Post
• https://twitter.com/0dayPublishing/status/1990863807959171544 · Twitter Post
• https://twitter.com/CVEnew/status/1991042966975094905 · Twitter Post