CVEFinder.io

CVE-2025-57823

ℹī¸ low
🔍 Scan for this CVE
Summary

A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow an authenticated attacker with at least sponsor permissions to read and download device logs via accessing specific endpoints

CVSS Score
2.7
Low
EPSS Score
0.0
Exploit Probability
Published Date
2025-12-09
First Seen: 2026-01-05
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 1.6% of all 326,604 vulnerabilities in our database.

#321,495
Below average severity
Severity Percentile
đŸŽ¯ CISA SSVC Assessment Updated: Dec 9, 2025
🔍 Exploitation Status
None
No known exploits
⚙ī¸ Automatable
NO
Requires human interaction
đŸ’Ĩ Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2025-12-09
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CWE IDs (Weakness Types)
CWE-425

đŸ“Ļ Affected Products 1

Vendor Product Status Affected Versions
fortinet fortiauthenticator Affected
≥ 6.3.0 ≤ 6.6.6

🔗 References 1

https://fortiguard.fortinet.com/psirt/FG-IR-25-554
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-44277 ⛔ critical 9.8 0.1 A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticat... 2026-05-12
CVE-2026-21743 ⚠ī¸ high 7.2 0.0 A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all ver... 2026-02-10
CVE-2025-59923 ℹī¸ low 2.7 0.0 An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all ... 2025-12-09
CVE-2022-23439 đŸ”ļ medium 4.7 0.1 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison w... 2025-01-22
CVE-2024-23664 đŸ”ļ medium 6.1 0.3 A URL redirection to untrusted site ('open redirect') in Fortinet FortiAuthenticator version 6.6.0, version 6.5.3 and be... 2024-06-03
CVE-2022-22302 đŸ”ļ medium 5.3 0.1 A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1, 6.2... 2023-07-11
These CVEs affect the same products