CVE-2025-61713
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-18

Last updated on: 2025-11-20

Assigner: Fortinet, Inc.

Description
A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators' credentials via diagnose commands.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-18
Last Modified
2025-11-20
Generated
2026-06-16
AI Q&A
2025-11-18
EPSS Evaluated
2026-06-15
NVD
CVE-2025-61713
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
fortinet fortipam From 1.0.0 (inc) to 1.6.1 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-316 The product stores sensitive information in cleartext in memory.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a Cleartext Storage of Sensitive Information in Memory issue in Fortinet FortiPAM versions 1.0 through 1.6.0. It allows an authenticated attacker with read-write admin privileges to the CLI to retrieve other administrators' credentials by using diagnose commands.

Impact Analysis

An attacker with sufficient privileges could obtain other administrators' credentials, potentially leading to unauthorized access to sensitive systems or data, increasing the risk of privilege escalation or insider threats.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-61713. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart