CVEvulnerability
CVE-2025-31514
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-10-14
- Last modified
- 2026-10-18
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-532
Description
A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to information disclosure via <insert attack vector here>
Affected configurations
• fortinet fortios (>= 6.4.0 < 7.6.4)
• fortinet fortiproxy (>= 7.0.0 < 7.6.4)
Related
Weakness · CWE (1)
- CWE-532 Insertion of Sensitive Information into Log File weakness
References
- https://fortiguard.fortinet.com/psirt/FG-IR-24-452 Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-864900.html cert-portal.siemens.com