Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-23371

A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors. We have already fixed the vulnerability in the following version: QVPN Windows 2.2.0.0823 and later

Published

2023-10-06T17:15:11.997

Last Modified

2024-11-21T07:46:03.173

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.2 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-311
    CWE-319
  • Type: Primary
    CWE-319
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application qnap qvpn < 2.2.0.0823 Yes
References