Improper Certificate Validation in Fortinet FortiAnalyzer and FortiManager Products

CVE-2025-68482

What is CVE-2025-68482?

An improper certificate validation vulnerability exists in Fortinet's FortiAnalyzer and FortiManager products, which can be exploited by remote unauthenticated attackers. This flaw may allow an attacker to intercept and view confidential information through a man-in-the-middle attack, exposing sensitive data and compromising the security of network communications. Users of affected versions are encouraged to review and implement necessary patches and updates to mitigate this vulnerability.

References