2.6
Faible
CVE-2025-57823 A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6,…
Description
A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow an authenticated attacker with at least sponsor permissions to read and download device logs via accessing specific endpoints
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiAuthenticator 6.6 | 6.6.0 → 6.6.6 | Pas de correctif indiqué |
| FortiAuthenticator 6.5 | 6.5.0 → 6.5.6 | Pas de correctif indiqué |
| FortiAuthenticator 6.4 | 6.4.0 → 6.4.10 | Pas de correctif indiqué |
| FortiAuthenticator 6.3 | 6.3.0 → 6.3.4 | Pas de correctif indiqué |
Références
- fortiguard.fortinet.com fortiguard.fortinet.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de FortiAuthenticator
Les 11 CVE de FortiAuthenticator →
CVE-2025-53379
A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all…
7.0
Élevée
CVE-2026-44277
A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0,…
9.1
Critique
CVE-2026-21743
A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all…
6.8
Moyenne
CVE-2025-59923
An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5…
2.6
Faible