CVE-2025-46752

A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code.

Score

CVSS 3.1 4.4 Medium

Status

Analyzed - psirt@fortinet.com

Published

2025-10-16

Last modified

2026-10-09

Weaknesses

CWE-532

Affected products

• Fortidlp (Fortinet)
• Fortidlp Agent (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-25-160