> Insertion of sensitive information into REST API logs
[DATE: 09/12/2025 08:00]
[LANGUAGE: EN]
CVSSv3 Score:
6.3
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS, FortiProxy, FortiPAM and FortiSRA may allow a read-only administrator to retrieve API tokens of other administrators via observing REST API logs, if REST API logging is enabled (non-default configuration).
Revised on 2025-12-09 00:00:00