CVE-2025-61713

published 2025-11-18

CVE-2025-61713: A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all…

Priority P4 20 medium 4.4 CVSS 3.1

AV L AC L PR H UI N S U C H I N A N

A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators' credentials via diagnose commands.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortinet	—	—
fortinet	fortipam	—	—
fortinet	fortipam	—	—
fortinet	fortipam	—	—
fortinet	fortipam	>= 1.0.0 < 1.6.1	1.6.1
fortinet	fortipam	1.0.0 – 1.0.3	—
fortinet	fortipam	1.1.0 – 1.1.2	—
fortinet	fortipam	1.3.0 – 1.3.1	—
fortinet	fortipam	1.4.0 – 1.4.3	—
fortinet	fortipam	1.5.0 – 1.5.1	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-316