> Read-only admin could obtain admin configuration secrets

[SOURCE] Fortinet FortiGuard [DATE: 09/12/2025 08:00] [LANGUAGE: EN]

 
  CVSSv3 Score:
 
 2.6

 An improper access control vulnerability [CWE-284] in FortiAuthenticator Web UI may allow an authenticated attacker with at least read-only admin permission to obtain the credentials of other administrators' messaging services via crafted requests.

  Revised on 2025-12-09 00:00:00

[messages.read_original_source] →