FortiTester - command injection in "execute restore/backup" CLI commands

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiTester may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments when running execute restore/backup .

attacker backup cli command command injection command line cwe fortitester injection interpreter may os command restore running special vulnerability