CVE-2025-46752

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-46752", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "state": "PUBLISHED", "assignerShortName": "fortinet", "dateReserved": "2025-04-29T00:20:46.508Z", "datePublished": "2025-10-16T14:00:30.930Z", "dateUpdated": "2026-01-14T09:17:01.488Z"}, "containers": {"cna": {"affected": [{"vendor": "Fortinet", "product": "FortiDLP", "cpes": ["cpe:2.3:a:fortinet:fortidlp:12.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:12.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:12.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:12.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:11.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:11.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:11.4.5:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"versionType": "semver", "version": "12.0.4", "lessThanOrEqual": "12.0.5", "status": "affected"}, {"version": "12.0.2", "status": "affected"}, {"version": "12.0.0", "status": "affected"}, {"version": "11.5.1", "status": "affected"}, {"versionType": "semver", "version": "11.4.5", "lessThanOrEqual": "11.4.6", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code."}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2026-01-14T09:17:01.488Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-532", "description": "Information disclosure", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:U/RC:C"}}], "solutions": [{"lang": "en", "value": "Upgrade to FortiDLP version 12.1.0 or above"}], "references": [{"name": "https://fortiguard.fortinet.com/psirt/FG-IR-25-160", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-160"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-16T14:20:20.963552Z", "id": "CVE-2025-46752", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-16T14:20:31.156Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-46752", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-16T14:20:20.963552Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-16T14:20:24.708Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:U/RC:C", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"cpes": ["cpe:2.3:a:fortinet:fortidlp:12.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:12.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:12.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:12.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:11.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:11.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:11.4.5:*:*:*:*:*:*:*"], "vendor": "Fortinet", "product": "FortiDLP", "versions": [{"status": "affected", "version": "12.0.4", "versionType": "semver", "lessThanOrEqual": "12.0.5"}, {"status": "affected", "version": "12.0.2"}, {"status": "affected", "version": "12.0.0"}, {"status": "affected", "version": "11.5.1"}, {"status": "affected", "version": "11.4.5", "versionType": "semver", "lessThanOrEqual": "11.4.6"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Upgrade to FortiDLP version 12.1.0 or above"}], "references": [{"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-160", "name": "https://fortiguard.fortinet.com/psirt/FG-IR-25-160"}], "descriptions": [{"lang": "en", "value": "A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-532", "description": "Information disclosure"}]}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2026-01-14T09:17:01.488Z"}}}, "cveMetadata": {"cveId": "CVE-2025-46752", "state": "PUBLISHED", "dateUpdated": "2026-01-14T09:17:01.488Z", "dateReserved": "2025-04-29T00:20:46.508Z", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "datePublished": "2025-10-16T14:00:30.930Z", "assignerShortName": "fortinet"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:fortinet:fortidlp:12.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:12.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:12.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:12.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:11.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:11.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortidlp:11.4.5:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "FortiDLP", "vendor": "Fortinet", "versions": [{"lessThanOrEqual": "12.0.5", "status": "affected", "version": "12.0.4", "versionType": "semver"}, {"status": "affected", "version": "12.0.2"}, {"status": "affected", "version": "12.0.0"}, {"status": "affected", "version": "11.5.1"}, {"lessThanOrEqual": "11.4.6", "status": "affected", "version": "11.4.5", "versionType": "semver"}]}], "source": "psirt@fortinet.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortidlp_agent:*:*:*:*:*:*:*:*", "matchCriteriaId": "69C715E7-58C6-407E-99E3-DE7A4B554A3F", "versionEndIncluding": "12.0.5", "versionStartIncluding": "11.4.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code."}, {"lang": "es", "value": "Una inserci\u00f3n de informaci\u00f3n sensible en un archivo de registro en Fortinet FortiDLP 12.0.0 hasta 12.0.5, 11.5.1, 11.4.6, 11.4.5 permite al atacante la revelaci\u00f3n de informaci\u00f3n mediante la reutilizaci\u00f3n del c\u00f3digo de inscripci\u00f3n."}], "id": "CVE-2025-46752", "lastModified": "2026-10-09T10:10:00.193", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 2.5, "source": "psirt@fortinet.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 2.5, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-46752", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-16T14:20:20.963552Z", "version": "2.0.3"}}]}, "published": "2025-10-16T14:15:35.673", "references": [{"source": "psirt@fortinet.com", "tags": ["Vendor Advisory"], "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-160"}], "sourceIdentifier": "psirt@fortinet.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-532"}], "source": "psirt@fortinet.com", "type": "Secondary"}]}

{}

{}