medium5.5
CVE-2023-40715
A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an attacker with access to the DB contents to…
Impact
A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an attacker with access to the DB contents to retrieve the plaintext password of external servers configured in the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortitester | from 2.3.0 through 7.2.3 |