CVE-2025-59923
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, 6.5 all versions, 6.4 all versions, 6.3 all versions may allow an authenticated attacker with at least read-only admin permission to obtain the credentials of other administrators' messaging services via crafted requests.
Risk Assessment
An attacker can obtain credentials of other administrators, potentially leading to privilege escalation and further compromise. Authentication is required, but it can result in takeover of privileged accounts.
Recommendation
Update FortiAuthenticator to the latest patched version. Restrict administrative permissions to the minimum necessary.
Other vulnerabilities in FortiAuthenticator
See all- CVE-2013-6990High
FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface.
- CVE-2025-53379High
An out-of-bounds read vulnerability in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.2 and all versions of 6.5 may allow a remote unauthenticated attacker to retrieve sensitive information via a specially crafted request.
- CVE-2025-57823Low
Fortinet FortiAuthenticator versions 6.6.0 through 6.6.6, and all versions of 6.5, 6.4, 6.3 have a forced browsing vulnerability that allows an authenticated attacker with at least sponsor permissions to read and download device logs via accessing specific endpoints.
Original NVD description (English source)
An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow an authenticated attacker with at least read-only admin permission to obtain the credentials of other administrators' messaging services via crafted requests.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS