CVE-2023-28616

An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.x before 4.7.1

published December 26, 2023

CVSS
—
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.x before 4.7.1. It affects user accounts for which the password has an equals sign or space character. The serverd process logs such passwords in cleartext, and potentially sends these logs to the Syslog component.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00295 · 21.0th percentile
Published
2023-12-26T00:00Z
EPSS history
Timeline
  • 26 DEC 00:00Z
    An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.x before 4.7.1
    cvelistv5