← Back

CVE-2025-61713

nvd nist
Published: Nov 18, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.4
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Exploitability: 0.8 / Impact: 3.6
Source: NVD

Description

A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators' credentials via diagnose commands.

Affected (1)

Products: Fortinet: Fortipam
Fortinet
1 product
Fortipam
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Fortipam
From 1.0.0 to 1.6.1

Related CWEs

CWE-316
Cleartext Storage of Sensitive Information in Memory
The product stores sensitive information in cleartext in memory.

References (1)

Source: psirt@fortinet.com
Vendor Advisory

Timeline

No history available yet.