Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-30357

SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access.

Published

2021-06-08T14:15:07.973

Last Modified

2024-11-21T06:03:56.467

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-209
  • Type: Primary
    CWE-209
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application checkpoint ssl_network_extender r80.10 Yes
Application checkpoint ssl_network_extender r80.20 Yes
Application checkpoint ssl_network_extender r80.30 Yes
Application checkpoint ssl_network_extender r80.40 Yes
Application checkpoint ssl_network_extender r81 Yes
References