CVE-2025-53950: Medium severity Fortinet FortiDLP Agent vulnerability
An Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS and Windows 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1. through 11.1.2 and 11.0.1 and 10.5.1 and 10.4.0, and 10.3.1 may allow an authenticated administrator to collect current user's email information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Fortinet FortiDLPto a version that resolves this vulnerability.Fixed in 12.0.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53950?
CVE-2025-53950 is classified as a privacy violation vulnerability that could lead to exposure of private personal information.
How do I fix CVE-2025-53950?
To fix CVE-2025-53950, ensure you update the Fortinet FortiDLP Agent to the latest version as specified by Fortinet.
Which versions of Fortinet FortiDLP Agent are affected by CVE-2025-53950?
CVE-2025-53950 affects Fortinet FortiDLP Agent versions ranging from 10.3.1 to 11.5.1.
What types of systems are impacted by CVE-2025-53950?
CVE-2025-53950 impacts both MacOS and Windows systems using the Fortinet FortiDLP Agent's Outlookproxy plugin.
What is the nature of the vulnerability in CVE-2025-53950?
The nature of CVE-2025-53950 is an exposure of private personal information due to a flaw in the handling of data by the FortiDLP Agent.