Back to feed
EUVD-2023-45269 · Published Sep 13, 2023
A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an attacker with access to the DB contents to retrieve the plaintext password of external servers configured in the device.
Technologies
Fortinet Fortitester
Weaknesses
CWE-312
CVSS scores
- v3.15.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation Credential Access Collection
References
Potentially impacted assets
See if this affects your attack surface
