---
cve: "CVE-2025-59669"
severity: "MEDIUM"
cvss: 4.8
epss: "12%"
vendor: "Fortinet"
kev: false
exploited: false
published: "2025-11-18 17:16:07"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-17T15:21:15+02:00"
---

# CVE-2025-59669

> 4.8 MEDIUM

## Beschreibung

A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker with shell access to the device to connect to redis service and access its data

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:U/RC:R
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Gering | warn |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Gering | warn |
| I Integrität | Gering | warn |
| A Verfügbarkeit | Gering | warn |

## Referenzen

- <https://fortiguard.fortinet.com/psirt/FG-IR-25-843>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2025-59669) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_