CVE-2025-61713CWE-316

CVE-2025-61713

Medium · published November 18, 2025

CVSS v3.1
4.2
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators' credentials via diagnose commands.

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00116 · 1.5th percentile
Weakness
CWE-316 · Cleartext Storage of Sensitive Information in Memory
Published
2025-11-18T22:16Z
Affected products (1)
ProductVersionsFixed in
fortinet/fortipam≥ 1.0.0, < 1.6.11.6.1
References (1)
https://fortiguard.fortinet.com/psirt/FG-IR-25-789 · [email protected]
EPSS history
Timeline
  • 18 NOV 17:01Z
    A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all…
    cvelistv5