Fortinet FortiAnalyzer/FortiManager up to 7.6.4 HTTP potentially dangerous function

Summaryinfo

A vulnerability categorized as problematic has been discovered in Fortinet FortiAnalyzer and FortiManager up to 6.4.15/7.0.16/7.2.12/7.4.8/7.6.4. Affected is an unknown function of the component HTTP Handler. The manipulation results in use of potentially dangerous function. This vulnerability is reported as CVE-2025-67604. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Fortinet FortiAnalyzer and FortiManager up to 6.4.15/7.0.16/7.2.12/7.4.8/7.6.4. Affected is an unknown functionality of the component HTTP Handler. The manipulation with an unknown input leads to a use of potentially dangerous function vulnerability. CWE is classifying the issue as CWE-676. The product invokes a potentially dangerous function that could introduce a vulnerability if it is used incorrectly, but the function can also be used safely. This is going to have an impact on availability. CVE summarizes:

A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions may allow an authenticated attacker to cause a system hang via multiple specially crafted HTTP requests causing crashes. This happens if internal locks are aligned, which is out of control of the attacker.

The advisory is shared for download at fortiguard.fortinet.com. This vulnerability is traded as CVE-2025-67604 since 12/09/2025. The exploitability is told to be difficult. It is possible to launch the attack remotely. There are neither technical details nor an exploit publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 314326 (Fortinet FortiAnalyzer DoS due to unsafe function in signal handler (FG-IR-26-137)), which helps to determine the existence of the flaw in a target environment.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (314326). Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Fortinet

Name

• FortiAnalyzer
• FortiManager

Version

• 6.4.0
• 6.4.1
• 6.4.2
• 6.4.3
• 6.4.4
• 6.4.5
• 6.4.6
• 6.4.7
• 6.4.8
• 6.4.9
• 6.4.10
• 6.4.11
• 6.4.12
• 6.4.13
• 6.4.14
• 6.4.15
• 7.0.0
• 7.0.1
• 7.0.2
• 7.0.3
• 7.0.4
• 7.0.5
• 7.0.6
• 7.0.7
• 7.0.8
• 7.0.9
• 7.0.10
• 7.0.11
• 7.0.12
• 7.0.13
• 7.0.14
• 7.0.15
• 7.0.16
• 7.2.0
• 7.2.1
• 7.2.2
• 7.2.3
• 7.2.4
• 7.2.5
• 7.2.6
• 7.2.7
• 7.2.8
• 7.2.9
• 7.2.10
• 7.2.11
• 7.2.12
• 7.4.0
• 7.4.1
• 7.4.2
• 7.4.3
• 7.4.4
• 7.4.5
• 7.4.6
• 7.4.7
• 7.4.8
• 7.6.0
• 7.6.1
• 7.6.2
• 7.6.3
• 7.6.4

License

• commercial

Website

• Vendor: https://www.fortinet.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion