CVE-2025-57823
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Fortinet FortiAuthenticator versions 6.6.0 through 6.6.6, and all versions of 6.5, 6.4, 6.3 have a forced browsing vulnerability that allows an authenticated attacker with at least sponsor permissions to read and download device logs via accessing specific endpoints.
Risk Assessment
The risk includes the possibility of unauthorized access to sensitive device logs, which could lead to disclosure of user information, configuration, or security events.
Recommendation
It is recommended to restrict access to specific endpoints, apply vendor patches, and review user permissions.
Other vulnerabilities in FortiAuthenticator
See all- CVE-2013-6990High
FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface.
- CVE-2025-53379High
An out-of-bounds read vulnerability in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.2 and all versions of 6.5 may allow a remote unauthenticated attacker to retrieve sensitive information via a specially crafted request.
Original NVD description (English source)
A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow an authenticated attacker with at least sponsor permissions to read and download device logs via accessing specific endpoints
Vulnerability data from NVD (NIST) · CISA KEV · EPSS