PT-2023-30309 · Securepoint · Securepoint Ssl Vpn Client

CVE-2023-47101 · Publicado 2023-10-30 · Atualizado 2024-09-09

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Securepoint SSL VPN Client versions prior to 2.0.40

Description The issue allows local privilege escalation during installation or repair. It is related to the installer, also known as openvpn-client-installer, in the Securepoint SSL VPN Client.

Recommendations For versions prior to 2.0.40, update to version 2.0.40 or later to resolve the issue. As a temporary workaround, consider restricting access to the installer until a patch is applied.

Exploit

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2023-47101

Produtos afetados

Securepoint Ssl Vpn Client

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/47xxx/CVE-2023-47101.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-47101 · Nota de Segurança
• https://t.me/latest_high_impact_cve/75 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-47101 · Aviso do Fabricante
• https://cyvisory.group/advisory/CYADV-2023-012 · Nota
• https://t.me/cvenotify/93887 · Publicação no Telegram
• https://sourceforge.net/p/securepoint/news/2023/08/2040-is-now-available · Nota
• https://twitter.com/VulmonFeeds/status/1719092983134306763 · Publicação no Twitter