PT-2024-12152 · Dell · Bsafe Ssl-J

Published 2024-02-09 · Updated 2024-02-15 · CVE-2023-28077

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell BSAFE SSL-J versions prior to 6.5 Dell BSAFE SSL-J versions 7.0 and 7.1

Description The issue is related to a debug message revealing unnecessary information, which may lead to disclosing sensitive information to a locally privileged user.

Recommendations For versions prior to 6.5, update to version 6.5 or later. For versions 7.0 and 7.1, update to a version later than 7.1. As a temporary workaround, consider disabling debug messages until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

CWE-1295

Related Identifiers

CVE-2023-28077

Affected Products

Bsafe Ssl-J

References · 6

• https://dell.com/support/kbdoc/en-us/000214287/dsa-2023-156-dell-bsafe-ssl-j-7-1-1-security-update · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-28077 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28077 · Security Note
• https://twitter.com/VulmonFeeds/status/1756203628661014804 · Twitter Post
• https://t.me/cvenotify/70926 · Telegram Post
• https://twitter.com/CVEnew/status/1756157689225236617 · Twitter Post