5.3
CVE-2021-30357
- EPSS 29.98%
- Veröffentlicht 08.06.2021 14:15:07
- Zuletzt bearbeitet 21.11.2024 06:03:56
- Quelle cve@checkpoint.com
- Teams Watchlist Login
- Unerledigt Login
SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Checkpoint ≫ Ssl Network Extender Versionr80.10 SwPlatformlinux
Checkpoint ≫ Ssl Network Extender Versionr80.20 SwPlatformlinux
Checkpoint ≫ Ssl Network Extender Versionr80.30 SwPlatformlinux
Checkpoint ≫ Ssl Network Extender Versionr80.40 SwPlatformlinux
Checkpoint ≫ Ssl Network Extender Versionr81 SwPlatformlinux
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 29.98% | 0.965 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-209 Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.