> Private key readable by admin
[DATE: 09/12/2025 08:00]
[LANGUAGE: EN]
CVSSv3 Score:
5.9
A key management error vulnerability [CWE-320] in FortiManager, FortiAnalyzer and FortiPortal may allow an authenticated admin to retrieve a certificate's private key via the device's admin shell.
Revised on 2025-12-09 00:00:00