BaseFortify

Publication date: 2025-11-18

Last updated on: 2025-11-20

Assigner: Fortinet, Inc.

Description

A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators' credentials via diagnose commands.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-18

Last Modified

2025-11-20

Generated

2026-07-06

AI Q&A

2025-11-18

EPSS Evaluated

2026-07-05

NVD

CVE-2025-61713

Affected Vendors & Products

Vendor	Product	Version / Range
fortinet	fortipam	From 1.0.0 (inc) to 1.6.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-316	The product stores sensitive information in cleartext in memory.

Attack-Flow Graph

Executive Summary

This vulnerability is a Cleartext Storage of Sensitive Information in Memory issue in Fortinet FortiPAM versions 1.0 through 1.6.0. It allows an authenticated attacker with read-write admin privileges to the CLI to retrieve other administrators' credentials by using diagnose commands.

Impact Analysis

An attacker with sufficient privileges could obtain other administrators' credentials, potentially leading to unauthorized access to sensitive systems or data, increasing the risk of privilege escalation or insider threats.

Hi! I’m here to help you understand CVE-2025-61713. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70