PT-2023-5851 · Qvpn · Qvpn Device Client+1
CVSS v3.1
6.7
Medium
| Vector | AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
QVPN Device Client versions prior to 2.1.0.0518
Description
The issue is related to insufficient protection of credentials, which could allow local authenticated administrators to gain access to user accounts and sensitive data via unspecified vectors.
Recommendations
For versions prior to 2.1.0.0518, update to QVPN Windows 2.1.0.0518 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update is applied.
Fix
Insufficiently Protected Credentials
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Qvpn Device Client
Qvpn Windows