Fortinet FortiPortal Trust Management Issue Vulnerability

Fortinet FortiPortal is an advanced, feature-rich managed security analysis and management support tool for Fortinet’s FortiGate, FortiWiFi, and FortiAP product lines, available as a virtual machine for MSPs.Fortinet FortiPortal has a trust management issue vulnerability, which stems from the presence of hard-coded Tomcat Manager user names and passwords in the application code. An attacker could use the hard-coded credentials to access the affected system and execute arbitrary commands as the root user.