CVE-2025-55717
4.0
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
Exploitability: 0.3 / Impact: 3.6
Source: NVD
Description
A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0 all versions, FortiRecorder 6.4 all versions, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6 may allow an authenticated malicious administrator to obtain user's secrets via CLI commands. Practical exploitability is limited by conditions out of the control of the attacker: An admin must log in to the targeted device.
Affected (7)
Products: Fortinet: Fortivoice, Fortirecorder, Fortimail
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 7.0.0 to 7.0.7 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 6.4.0 to 7.2.4 |
References (1)
Timeline
No history available yet.