PT-2023-15028 · Stormshield · Stormshield Ssl Vpn Client
CVE-2022-46783
·
Publicado
2023-08-28
·
Atualizado
2023-09-01
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Stormshield SSL VPN Client versions prior to 3.2.0
Description
An issue was discovered in the Stormshield SSL VPN Client. If multiple address books are used, an attacker may be able to access the other encrypted address book.
Recommendations
For versions prior to 3.2.0, update to version 3.2.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of multiple address books to minimize the risk of exploitation.
Correção
Inadequate Encryption Strength
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Stormshield Ssl Vpn Client