CVE-2025-54822

An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.11, FortiProxy 7.4.0 through 7.4.8, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions allows an authenticated attacker to access static files of others VDOMs via crafted HTTP or HTTPS requests.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://fortiguard.fortinet.com/psirt/FG-IR-25-684	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::

Configuration 2 (hide)

cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*

History

18 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de autorización impropia [CWE-285] vulnerabilidad en Fortinet FortiOS 7.4.0 a 7.4.1, FortiOS 7.2.0 a 7.2.8, FortiOS 7.0.0 a 7.0.11, FortiProxy 7.4.0 a 7.4.8, FortiProxy 7.2 todas las versiones, FortiProxy 7.0 todas las versiones, FortiProxy 2.0 todas las versiones permite a un atacante autenticado acceder a archivos estáticos de otros VDOMs a través de solicitudes HTTP o HTTPS manipuladas.

Information

Published : 2025-10-14 16:15

Updated : 2026-10-18 21:10

NVD link : CVE-2025-54822

Mitre link : CVE-2025-54822

CVE.ORG link : CVE-2025-54822

JSON object : View

Products Affected

fortinet

fortiproxy
fortios

CWE

CWE-285

Improper Authorization

{"id": "CVE-2025-54822", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-54822", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-14T16:37:27.718798Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@fortinet.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@fortinet.com", "affectedData": [{"cpes": ["cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*"], "vendor": "Fortinet", "product": "FortiProxy", "versions": [{"status": "affected", "version": "7.4.0", "versionType": "semver", "lessThanOrEqual": "7.4.8"}, {"status": "affected", "version": "7.2.0", "versionType": "semver", "lessThanOrEqual": "7.2.15"}, {"status": "affected", "version": "7.0.0", "versionType": "semver", "lessThanOrEqual": "7.0.22"}, {"status": "affected", "version": "2.0.0", "versionType": "semver", "lessThanOrEqual": "2.0.14"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"], "vendor": "Fortinet", "product": "FortiOS", "versions": [{"status": "affected", "version": "7.4.0", "versionType": "semver", "lessThanOrEqual": "7.4.1"}, {"status": "affected", "version": "7.2.0", "versionType": "semver", "lessThanOrEqual": "7.2.8"}, {"status": "affected", "version": "7.0.0", "versionType": "semver", "lessThanOrEqual": "7.0.11"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-14T16:15:39.180", "references": [{"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-684", "tags": ["Vendor Advisory"], "source": "psirt@fortinet.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "psirt@fortinet.com", "description": [{"lang": "en", "value": "CWE-285"}]}], "descriptions": [{"lang": "en", "value": "An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.11, FortiProxy 7.4.0 through 7.4.8, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions allows an authenticated attacker to access static files of others VDOMs via crafted HTTP or HTTPS requests."}, {"lang": "es", "value": "Una vulnerabilidad de autorizaci\u00f3n impropia [CWE-285] vulnerabilidad en Fortinet FortiOS 7.4.0 a 7.4.1, FortiOS 7.2.0 a 7.2.8, FortiOS 7.0.0 a 7.0.11, FortiProxy 7.4.0 a 7.4.8, FortiProxy 7.2 todas las versiones, FortiProxy 7.0 todas las versiones, FortiProxy 2.0 todas las versiones permite a un atacante autenticado acceder a archivos est\u00e1ticos de otros VDOMs a trav\u00e9s de solicitudes HTTP o HTTPS manipuladas."}], "lastModified": "2026-10-18T21:10:00.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC7395B0-2864-49E3-8B70-935A17EF3162", "versionEndExcluding": "7.2.9", "versionStartIncluding": "7.0.0"}, {"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4316C2EA-3D6E-4A0C-B81D-ADCE040E03E0", "versionEndExcluding": "7.4.2", "versionStartIncluding": "7.4.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB3C0418-E314-45E0-A706-A9B45231ED1E", "versionEndExcluding": "7.4.9", "versionStartIncluding": "2.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@fortinet.com"}