CVE-2025-46752 - A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code

Back Back to CVE browser

MEDIUM

A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code

Published Oct 16, 2025

4.4

MEDIUM

CVSS 3.1

EPSS 0.16%

Description

A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code.

Affected products

Vendor Fortinet Product FortiDLP Default
unaffected
- Version
  11.4.5
  Status
  affected
  Constraints
  <=11.4.6
- Version
  11.5.1
  Status
  affected
  Constraints
  -
- Version
  12.0.0
  Status
  affected
  Constraints
  -
- Version
  12.0.2
  Status
  affected
  Constraints
  -
- Version
  12.0.4
  Status
  affected
  Constraints
  <=12.0.5