Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2025-53845

An improper authentication vulnerability [CWE-287] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information p

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

An improper authentication vulnerability [CWE-287] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of service via crafted OFTP requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiAnalyzer

Default version status: unaffected

  • 7.6.0 to ≤ 7.6.3affected
  • 7.4.0 to ≤ 7.4.6affected
  • 7.2.0 to ≤ 7.2.11affected
  • 7.0.0 to ≤ 7.0.15affected
  • 6.4.0 to ≤ 6.4.15affected

References