PT-2023-30309 · Securepoint · Securepoint Ssl Vpn Client

Published 2023-10-30 · Updated 2024-09-09 · CVE-2023-47101

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Securepoint SSL VPN Client versions prior to 2.0.40

Description The issue allows local privilege escalation during installation or repair. It is related to the installer, also known as openvpn-client-installer, in the Securepoint SSL VPN Client.

Recommendations For versions prior to 2.0.40, update to version 2.0.40 or later to resolve the issue. As a temporary workaround, consider restricting access to the installer until a patch is applied.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2023-47101

Affected Products

Securepoint Ssl Vpn Client

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-47101 · Security Note
• https://osv.dev/vulnerability/CVE-2023-47101 · Vendor Advisory
• https://cyvisory.group/advisory/CYADV-2023-012 · Note
• https://twitter.com/VulmonFeeds/status/1719092983134306763 · Twitter Post
• https://t.me/latest_high_impact_cve/75 · Telegram Post
• https://t.me/cvenotify/93887 · Telegram Post
• https://sourceforge.net/p/securepoint/news/2023/08/2040-is-now-available · Note