CVE-2025-61713

A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators' credentials via diagnose commands.

Scoring

Severity

LOW

CVSS base score

3.8

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

EPSS probability

0.11%

CWE

CWE-316

Published

2025-11-18

Last modified

2026-03-12

Affected products

• Fortinet FortiPAM
• Fortinet FortiPAM
• Fortinet FortiPAM
• Fortinet FortiPAM
• Fortinet FortiPAM
• Fortinet FortiPAM
• Fortinet FortiPAM

Weakness type

• CWE-316

Related vulnerabilities

• CVE-2026-53604 — nebula-mesh: CA private key not zeroized on web mobile-bundle error paths
• CVE-2026-75137 — UpSignOn < 7.19.0 Sensitive Data Exposure in Process Memory after Lock
• CVE-2026-75135 — UpSignOn < 7.19.0 Sensitive Key Retention in Memory
• CVE-2026-27875 — Simplex Incident Manager Clear Test
• CVE-2026-8636 — Multiple Vulnerabilities in IBM Datacap
• CVE-2026-0857 — Cleartext Storage of Sensitive Information in Memory vulnerability in Mesalvo Meona Client Launcher...
• CVE-2026-24319 — Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)
• CVE-2025-4618 — Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma Browser

Markdown version · Browse all CVEs