A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code.
2025-10-16T14:15:35.673
2025-10-16T17:50:03.337
Analyzed
CVSSv3.1: 4.4 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | fortinet | fortidlp_agent | ≤ 12.0.5 | Yes |
| Operating System | microsoft | windows | - | No |