CVE-2023-28077CWE-1295

Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability

Medium · published February 10, 2024

CVSS v3.1
4.4
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information to a locally privileged user.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.7th percentile
Weakness
CWE-1295 · Debug Messages Revealing Unnecessary Information
Published
2024-02-10T03:11Z
EPSS history
Timeline
  • 10 FEB 03:11Z
    Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability
    cvelistv5