CVEvulnerability

CVE-2025-53950

6.0 MEDIUM Published 2025-10-16 Modified 2026-10-09 Official page ↗
Status
Analyzed
Published
2025-10-16
Last modified
2026-10-09
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-359

Description

An Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS and Windows 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1. through 11.1.2 and 11.0.1 and 10.5.1 and 10.4.0, and 10.3.1 may allow an authenticated administrator to collect current user's email information.

Affected configurations

• fortinet fortidlp agent (>= 10.3.1 <= 11.5.1)

Related

Weakness · CWE (1)

  • CWE-359 Exposure of Private Personal Information to an Unauthorized Actor weakness

References