CVEvulnerability

CVE-2025-68482

5.9 MEDIUM Published 2026-03-10 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-03-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-295

Description

A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to view confidential information via a man in the middle [MiTM] attack.

Affected configurations

• fortinet fortimanager (>= 6.4.0 < 7.4.9) • fortinet fortimanager (>= 7.6.0 < 7.6.5) • fortinet fortianalyzer (>= 6.4.0 < 7.4.9) • fortinet fortianalyzer (>= 7.6.0 < 7.6.5)

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References