Improper Access Control Vulnerability in Fortinet FortiAuthenticator

CVE-2025-59923

What is CVE-2025-59923?

An improper access control vulnerability has been identified in Fortinet FortiAuthenticator across several versions. This flaw enables an authenticated attacker with read-only admin privileges to exploit crafted requests to gain unauthorized access to the credentials of other administrators' messaging services. If not addressed, this vulnerability poses a significant risk to the security posture of organizations relying on FortiAuthenticator for authentication services.

References