CVE-2023-40717

Name of the Vulnerable Software and Affected Versions FortiTester versions 2.3.0 through 7.2.3

Description A use of hard-coded credentials issue in FortiTester may allow an attacker who has gained shell access to the device to access the database via shell commands. This could potentially lead to unauthorized access to protected information and the execution of arbitrary commands.

Recommendations For FortiTester versions 2.3.0 through 7.2.3, consider disabling shell access to the device until a patch is available to prevent exploitation of the hard-coded credentials. Restrict access to the database to minimize the risk of unauthorized data access.