This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Fortinet FortiDLP fixes 3 vulnerabilities
Fortinet warns of 3 vulnerabilities in FortiDLP, which can be mitigated by updating to versions 12.1 and 6.0 [1][2][3].
An authenticated local attacker can obtain the agent connection code from log files and reuse it [1].
The vulnerability is present in product:
- FortiDLP; >=12.0, <12.1; >=11.5, <11.6; >=11.4.5, <11.4.7;
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:U/RC:C
More information:
- CVE-2025-46752 at cve.org, NVD
- CWE-532: Insertion of Sensitive Information into Log File at cwe.mitre.org
The vulnerability was publicly disclosed 14. 10. 2025.
An authenticated local attacker with administrator privileges can obtain information from the current user's email account [2].
The vulnerability is present in product:
- FortiDLP; >=11.0, <11.6; >=10.3, <10.5;
CVSS: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N/E:F/RL:O/RC:C
More information:
- CVE-2025-53950 at cve.org, NVD
- CWE-359: Exposure of Private Personal Information to an Unauthorized Actor at cwe.mitre.org
The vulnerability was publicly disclosed 14. 10. 2025.
An authenticated local attacker can elevate their privileges to "LocalService" or "Root" by sending a specially crafted request. The vulnerability affects the Outlookproxy extension for Windows and MacOS [3].
The vulnerability is present in product:
- FortiDLP; >=11.0, <11.6; >=10.3, <10.5;
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
More information:
- CVE-2025-53951 at cve.org, NVD
- CVE-2025-54658 at cve.org, NVD
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') at cwe.mitre.org
The vulnerability was publicly disclosed 14. 10. 2025.
Links
By CESNET, z.s.p.o. Martin Krajči on 17. 10. 2025.