Product:
FortiOS
Summary
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Fortinet FortiOS versions 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, and all versions of 7.2, 7.0, and 6.4. This vulnerability allows a remote unauthenticated attacker to bypass a patch related to the symbolic link persistency mechanism. The attacker must first compromise the product through another vulnerability at the filesystem level.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.9 | CVE-2025-68686 |
Exploitation
To exploit this vulnerability, an attacker must first gain access to the system through a different vulnerability. Once access is obtained, the attacker can send crafted HTTP requests to bypass the patch for the symbolic link persistency mechanism. This allows the attacker to expose sensitive information without needing authentication.
Affected Products
- FortiOS 7.6.0 – 7.6.1: Vulnerable to unauthorized access due to a bypass of security patches.
- FortiOS 7.4.0 – 7.4.6: Similar vulnerabilities allowing exploitation through crafted requests.
- FortiOS 7.2: All versions are affected by this vulnerability.
- FortiOS 7.0: All versions are also vulnerable.
- FortiOS 6.4: All versions are included in the affected list.
Mitigation
To mitigate this vulnerability, it is recommended to update FortiOS to the latest version that addresses this issue. Regularly applying security patches and monitoring for any unauthorized access attempts can help protect against exploitation. Additionally, implementing network security measures can reduce the risk of initial compromise.