Sensitive Information Exposure in FortiADC Logs

Successful exploitation allows a read-only FortiADC administrator to recover external resource passwords from product logs. This can expose credentials intended to remain confidential and may enable unauthorized access to integrated external resources or downstream systems that rely on those credentials. The primary impact is confidentiality loss, with possible secondary impact depending on what the exposed external resource credentials permit.

Until patches can be applied, limit log access to the minimum necessary personnel, especially for accounts with read-only administrative access that can view logs. Review logging configuration and operational practices to reduce exposure of sensitive values where possible. Treat external resource credentials configured on affected FortiADC systems as potentially compromised, rotate them, and monitor associated external systems for suspicious authentication activity. Retain and review audit records to identify access to affected logs.

Apply Fortinet vendor fixes for CVE-2025-54971 by upgrading FortiADC to a patched release outside the affected versions. Because the vulnerability involves credential exposure in logs, remediation should also include reviewing and rotating any external resource passwords that may have been written to logs, restricting access to historical log data, and assessing whether exposed credentials were used for unauthorized access.