← Back

CVE-2025-46775

nvd nist
Published: Nov 18, 2025Modified: Oct 18, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: psirt@fortinet.com (Secondary)

Description

A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands.

Affected (2)

Fortinet
1 product
Fortiextender Firmware
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fortinet
Fortiextender Firmware
7.0.0 ≤ version < 7.4.8
Fortiextender Firmware
7.6.0 ≤ version < 7.6.3
Running on/withPlatform Versions
Fortinet
Fortiextender
All versions

Related CWEs

CWE-1295
Debug Messages Revealing Unnecessary Information
The product fails to adequately prevent the revealing of unnecessary and potentially sensitive system information within debugging messages.

References (1)

Source: psirt@fortinet.com
Vendor Advisory

Timeline

No history available yet.