Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

Fortinet FortiSOAR on-premise

CVE-2025-59810
MEDIUM 6.2

En bref

Source
NVD
EPSS
EPSS 0.26 % · centile 18 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
fortinet
Statut NVD
Analyzed

Rechercher sur…

Description

An improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow information disclosure to an authenticated attacker via crafted requests

Faiblesses (CWE)

  • CWE-284 — Contrôle d'accès incorrect

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 6.2CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:Cfortinet
CVSS 3.1MEDIUM 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NNVD · psirt@fortinet.com (Secondary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Fortinet · FortiSOAR on-premiseaffected 7.6.0 ≤ 7.6.2 ; affected 7.5.0 ≤ 7.5.1 ; affected 7.4.0 ≤ 7.4.5 ; affected 7.3.0 ≤ 7.3.3
Fortinet · FortiSOAR PaaSaffected 7.6.0 ≤ 7.6.2 ; affected 7.5.0 ≤ 7.5.1 ; affected 7.4.0 ≤ 7.4.5 ; affected 7.3.0 ≤ 7.3.3

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD