CVE-2021-30357

SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access.

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://supportcontent.checkpoint.com/solutions?id=sk173513	Vendor Advisory
https://supportcontent.checkpoint.com/solutions?id=sk173513	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:checkpoint:ssl_network_extender:r80.10:::::linux::
	cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:::::linux::
	cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:::::linux::
	cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:::::linux::
	cpe:2.3:a:checkpoint:ssl_network_extender:r81:::::linux::

History

21 Nov 2024, 06:03

Type	Values Removed	Values Added
References	~~() https://supportcontent.checkpoint.com/solutions?id=sk173513 - Vendor Advisory~~	() https://supportcontent.checkpoint.com/solutions?id=sk173513 - Vendor Advisory

Information

Published : 2021-06-08 14:15

Updated : 2024-11-21 06:03

NVD link : CVE-2021-30357

Mitre link : CVE-2021-30357

CVE.ORG link : CVE-2021-30357

JSON object : View

Products Affected

checkpoint

ssl_network_extender

CWE

CWE-209

Generation of Error Message Containing Sensitive Information

{"id": "CVE-2021-30357", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2021-06-08T14:15:07.973", "references": [{"url": "https://supportcontent.checkpoint.com/solutions?id=sk173513", "tags": ["Vendor Advisory"], "source": "cve@checkpoint.com"}, {"url": "https://supportcontent.checkpoint.com/solutions?id=sk173513", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "cve@checkpoint.com", "description": [{"lang": "en", "value": "CWE-209"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-209"}]}], "descriptions": [{"lang": "en", "value": "SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access."}, {"lang": "es", "value": "SSL Network Extender Client para Linux versiones build anteriores a 800008302, revela parte del contenido del archivo de configuraci\u00f3n suministrado, lo que permite divulgar parcialmente archivos a los que el usuario no ten\u00eda acceso"}], "lastModified": "2024-11-21T06:03:56.467", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:checkpoint:ssl_network_extender:r80.10:*:*:*:*:linux:*:*", "vulnerable": true, "matchCriteriaId": "424ECFFC-D92E-4040-AAD9-5A18ADAFE4B7"}, {"criteria": "cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:*:*:*:*:linux:*:*", "vulnerable": true, "matchCriteriaId": "6E36C9C4-C1FF-44E4-9177-467EAD0983D7"}, {"criteria": "cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:*:*:*:*:linux:*:*", "vulnerable": true, "matchCriteriaId": "726962E0-DF4B-4450-BF2F-F414A382CA78"}, {"criteria": "cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:*:*:*:*:linux:*:*", "vulnerable": true, "matchCriteriaId": "35346EB4-FDEC-4496-A90F-95EB35FA1532"}, {"criteria": "cpe:2.3:a:checkpoint:ssl_network_extender:r81:*:*:*:*:linux:*:*", "vulnerable": true, "matchCriteriaId": "35E08CA8-803F-460D-BB1B-57FEC4DA10CF"}], "operator": "OR"}]}], "sourceIdentifier": "cve@checkpoint.com"}