Skip to content
CVE PROGRAM SOURCE RECORD5.2 Medium

CVE-2023-40715

A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an attacker with access to the DB contents to retrieve the plainte

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an attacker with access to the DB contents to retrieve the plaintext password of external servers configured in the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiTester

Default version status: unaffected

  • 7.2.0 to ≤ 7.2.3affected
  • 7.1.0 to ≤ 7.1.1affected
  • 7.0.0affected
  • 4.2.0 to ≤ 4.2.1affected
  • 4.1.0 to ≤ 4.1.1affected
  • 4.0.0affected
  • 3.9.0 to ≤ 3.9.2affected
  • 3.8.0affected
  • 3.7.0 to ≤ 3.7.1affected
  • 3.6.0affected
  • 3.5.0 to ≤ 3.5.1affected
  • 3.4.0affected
  • 3.3.0 to ≤ 3.3.1affected
  • 3.2.0affected
  • 3.1.0affected
  • 3.0.0affected
  • 2.9.0affected
  • 2.8.0affected
  • 2.7.0affected
  • 2.6.0affected
  • 2.5.0affected
  • 2.4.0 to ≤ 2.4.1affected
  • 2.3.0affected

References