Skip to content
CVE PROGRAM SOURCE RECORD2.6 Low

CVE-2025-57823

A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, For

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow an authenticated attacker with at least sponsor permissions to read and download device logs via accessing specific endpoints

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiAuthenticator

Default version status: unaffected

  • 6.6.0 to ≤ 6.6.6affected
  • 6.5.0 to ≤ 6.5.6affected
  • 6.4.0 to ≤ 6.4.10affected
  • 6.3.0 to ≤ 6.3.4affected

References