CVEvulnerability
CVE-2025-57823
2.7 LOW
Official page ↗
- Status
- Analyzed
- Published
- 2025-12-09
- Last modified
- 2026-10-08
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-425
Description
A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow an authenticated attacker with at least sponsor permissions to read and download device logs via accessing specific endpoints
Affected configurations
• fortinet fortiauthenticator (>= 6.3.0 <= 6.6.6)
Related
Weakness · CWE (1)
- CWE-425 Direct Request weakness
References
- https://fortiguard.fortinet.com/psirt/FG-IR-25-554 Vendor Advisory