CVE-2023-40715CWE-312

A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an attacker with access to the DB contents to…

Medium · published September 13, 2023

CVSS v3.1
5.2
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an attacker with access to the DB contents to retrieve the plaintext password of external servers configured in the device.

The record
Technical detail
CVSS v3.1
5.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:X/RC:C
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.2th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2023-09-13T12:29Z
EPSS history
Timeline
  • 13 SEP 12:29Z
    A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an attacker with access to the DB contents to…
    cvelistv5