> Use of hardcoded password for the redis service
[DATE: 18/11/2025 08:00]
[LANGUAGE: EN]
CVSSv3 Score:
4.8
A use of hard-coded credentials vulnerability [CWE-798] in the internal redis services in FortiWeb may allow an authenticated attacker with shell access to the device to connect to any running redis service and access its data
Revised on 2025-11-18 00:00:00