Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-53950

Опубликовано: 16 окт. 2025
Источник: nvd
CVSS3: 5.5
CVSS3: 6
EPSS Низкий

Описание

An Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS and Windows 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1. through 11.1.2 and 11.0.1 and 10.5.1 and 10.4.0, and 10.3.1 may allow an authenticated administrator to collect current user's email information.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:fortinet:fortidlp_agent:*:*:*:*:*:*:*:*
Версия от 10.3.1 (включая) до 11.5.1 (включая)

Одно из

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 3%
0.00017
Низкий

5.5 Medium

CVSS3

6 Medium

CVSS3

Дефекты

CWE-359

Связанные уязвимости

CVSS3: 5.5
github
4 месяца назад

An Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS and Windows 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1. through 11.1.2 and 11.0.1 and 10.5.1 and 10.4.0, and 10.3.1 may allow an authenticated administrator to collect current user's email information.

EPSS

Процентиль: 3%
0.00017
Низкий

5.5 Medium

CVSS3

6 Medium

CVSS3

Дефекты

CWE-359