CVEvulnerability

CVE-2025-54822

4.3 MEDIUM Published 2025-10-14 Modified 2026-10-18 Official page ↗
Status
Modified
Published
2025-10-14
Last modified
2026-10-18
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-285

Description

An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.11, FortiProxy 7.4.0 through 7.4.8, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions allows an authenticated attacker to access static files of others VDOMs via crafted HTTP or HTTPS requests.

Affected configurations

• fortinet fortios (>= 7.0.0 < 7.2.9) • fortinet fortios (>= 7.4.0 < 7.4.2) • fortinet fortiproxy (>= 2.0.0 < 7.4.9)

Related

Weakness · CWE (1)

  • CWE-285 Improper Authorization weakness

References