CVE-2025-31514: Insertion of Sensitive 2FA Information in logs and debug command
A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to information disclosure via <insert attack vector here>
Other sources
An Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS may allow an attacker with at least read-only privileges to retrieve sensitive 2FA-related information via observing logs or via diagnose command.
— FortiGuard
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FortiOSto a version that resolves this vulnerability.Fixed in 7.6.4 - Upgrade
Upgrade
FortiProxyto a version that resolves this vulnerability.Fixed in 7.6.4 - Upgrade
Upgrade
FortiProxyto a version that resolves this vulnerability.Fixed in 7.4.14
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31514?
CVE-2025-31514 has been classified as a medium-severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2025-31514?
To fix CVE-2025-31514, upgrade to FortiOS version 7.6.4 or later.
What versions are affected by CVE-2025-31514?
CVE-2025-31514 affects FortiOS versions 7.6.0 through 7.6.3, as well as all versions of 7.4, 7.2, 7.0, and 6.4.
What type of sensitive information is exposed in CVE-2025-31514?
CVE-2025-31514 can expose sensitive two-factor authentication (2FA) related information.
Who can exploit CVE-2025-31514?
CVE-2025-31514 can be exploited by an attacker who has at least read-only privileges.