CVE-2025-54971_CVE-2025-54971

3.9 / 10

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

Description

An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions, FortiADC 7.0 all versions, FortiADC 6.2 all versions may allow an admin with read-only permission to get the external resources password via the logs of the product

Basic Information

ID CVE-2025-54971

Source fortinet

Published Nov 18, 2025 at 17:01

Affected Product

Vendor Fortinet

Product FortiADC

Version 7.4.0

Affected Versions Fortinet FortiADC 7.4.0
Fortinet FortiADC 7.2.0
Fortinet FortiADC 7.1.0
Fortinet FortiADC 7.0.0
Fortinet FortiADC 6.2.0

CWE Classification

CWE-200

References

fortiguard.fortinet.com /psirt/FG-IR-25-686

{
    "lastseen": "",
    "description": "An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions, FortiADC 7.0 all versions, FortiADC 6.2 all versions may allow an admin with read-only permission  to get the external resources password via the logs of the product",
    "published": "2025-11-18T17:01:17.182Z",
    "modified": "2025-11-18T17:01:17.182Z",
    "type": "cve",
    "title": "CVE-2025-54971",
    "source": "fortinet",
    "references": "https://fortiguard.fortinet.com/psirt/FG-IR-25-686",
    "id": "CVE-2025-54971",
    "bulletinFamily": "",
    "cwe": [
        "CWE-200"
    ],
    "cvelist": null,
    "sourceData": "Fortinet FortiADC 7.4.0\nFortinet FortiADC 7.2.0\nFortinet FortiADC 7.1.0\nFortinet FortiADC 7.0.0\nFortinet FortiADC 6.2.0",
    "sourceHref": "",
    "cvss": {
        "score": 3.9,
        "severity": "LOW",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "FortiADC",
    "version": "7.4.0",
    "vendor": "Fortinet",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}