Lucene search

[email protected]CVE-2023-40715

HistorySep 13, 2023 - 1:15 p.m.

CVE-2023-40715

2023-09-1313:15:09

CWE-312

[email protected]

web.nvd.nist.gov

cve-2023-40715

cleartext storage

sensitive information

vulnerability

cwe-312

fortitester

nvd

security

access

plaintext password

external servers

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

8.3%

JSON

A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an attacker with access to the DB contents to retrieve the plaintext password of external servers configured in the device.

CPENameOperatorVersion
fortinet:fortitesterfortinet fortitesterle7.2.3
fortinet:fortitesterfortinet fortitestereq7.1.1
fortinet:fortitesterfortinet fortitestereq3.9.1
fortinet:fortitesterfortinet fortitestereq3.9.0
fortinet:fortitesterfortinet fortitestereq4.1.1
fortinet:fortitesterfortinet fortitestereq7.0.0
fortinet:fortitesterfortinet fortitestereq2.3.0
fortinet:fortitesterfortinet fortitestereq2.9.0
fortinet:fortitesterfortinet fortitestereq2.4.1
fortinet:fortitesterfortinet fortitestereq2.7.0

CPE	Name	Operator	Version
fortinet:fortitester	fortinet fortitester	le	7.2.3
fortinet:fortitester	fortinet fortitester	eq	7.1.1
fortinet:fortitester	fortinet fortitester	eq	3.9.1
fortinet:fortitester	fortinet fortitester	eq	3.9.0
fortinet:fortitester	fortinet fortitester	eq	4.1.1
fortinet:fortitester	fortinet fortitester	eq	7.0.0
fortinet:fortitester	fortinet fortitester	eq	2.3.0
fortinet:fortitester	fortinet fortitester	eq	2.9.0
fortinet:fortitester	fortinet fortitester	eq	2.4.1
fortinet:fortitester	fortinet fortitester	eq	2.7.0

Rows per page:

1-10 of 361

References

fortiguard.com/psirt/FG-IR-22-465

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

8.3%

JSON

Related for CVE-2023-40715

cvelist1 prion1