VULNERABILITY INTELLIGENCE

CVE-2025-61713

CVSS score4.2 MEDIUM
EPSS probability0.12%
CISA KEVNot currently listed
Published2025-11-18
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Description

A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators' credentials via diagnose commands.

Weakness classification

  • psirt@fortinet.com: CWE-316

Primary references