Threat actors exploited buggy FortiManager instances to extract the credentials of managed devices.