CVE-2025-54971: Infoleak
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions, FortiADC 7.0 all versions, FortiADC 6.2 all versions may allow an admin with read-only permission to get the external resources password via the logs of the product
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54971?
CVE-2025-54971 is considered a high-severity vulnerability due to the potential exposure of sensitive information to unauthorized users.
How do I fix CVE-2025-54971?
To mitigate CVE-2025-54971, upgrade Fortinet FortiADC to the latest version that addresses this vulnerability.
What versions of FortiADC are affected by CVE-2025-54971?
CVE-2025-54971 affects all versions of Fortinet FortiADC from 6.2 up to 7.4.0.
What type of information can be exposed due to CVE-2025-54971?
CVE-2025-54971 may allow an admin with read-only permissions to access external resource passwords.
Who is at risk from CVE-2025-54971?
Administrators with read-only permissions in affected versions of Fortinet FortiADC are at risk due to the vulnerability.