← Back

CVE-2025-59669

nvd nist
Published: Nov 18, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker with shell access to the device to connect to redis service and access its data

Affected (1)

Products: Fortinet: Fortiweb
Fortinet
1 product
Fortiweb
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Fortiweb
From 7.0.0 to 7.6.1

Related CWEs

CWE-798
Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

References (1)

Source: psirt@fortinet.com
Vendor Advisory

Timeline

No history available yet.