CVE-2025-61713: Medium severity Fortinet FortiPAM vulnerability
A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators' credentials via diagnose commands.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61713?
CVE-2025-61713 is classified as a moderate severity vulnerability, with the potential for sensitive information disclosure.
How do I fix CVE-2025-61713?
To fix CVE-2025-61713, upgrade to a patched version of Fortinet FortiPAM that addresses this vulnerability.
What types of systems are affected by CVE-2025-61713?
CVE-2025-61713 affects Fortinet FortiPAM versions 1.0 through 1.6.0.
Can CVE-2025-61713 be exploited remotely?
CVE-2025-61713 requires authenticated access, meaning it cannot be exploited remotely without authorization.
What are the potential consequences of CVE-2025-61713?
The consequences of CVE-2025-61713 include unauthorized access to sensitive information stored in memory, which could lead to further exploitation.