5.3
CVE-2021-30357
- EPSS 29.98%
- Published 08.06.2021 14:15:07
- Last modified 21.11.2024 06:03:56
- Source cve@checkpoint.com
- Teams watchlist Login
- Open Login
SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access.
Data is provided by the National Vulnerability Database (NVD)
Checkpoint ≫ Ssl Network Extender Versionr80.10 SwPlatformlinux
Checkpoint ≫ Ssl Network Extender Versionr80.20 SwPlatformlinux
Checkpoint ≫ Ssl Network Extender Versionr80.30 SwPlatformlinux
Checkpoint ≫ Ssl Network Extender Versionr80.40 SwPlatformlinux
Checkpoint ≫ Ssl Network Extender Versionr81 SwPlatformlinux
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 29.98% | 0.965 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-209 Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.