CVE-2023-40717
No fix known EPSS <1%CVSS 5.0
A use of hard-coded credentials vulnerability [CWE-798] in FortiTester 2.3.0 through 7.2.3 may allow an attacker who managed to get a shell on the device to access the database via shell commands.
Products: Fortinet FortiTester