mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
134 lines
4.0 KiB
JSON
134 lines
4.0 KiB
JSON
{
|
|
"id": "CVE-2021-30357",
|
|
"sourceIdentifier": "cve@checkpoint.com",
|
|
"published": "2021-06-08T14:15:07.973",
|
|
"lastModified": "2021-06-17T16:05:22.110",
|
|
"vulnStatus": "Analyzed",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "SSL Network Extender Client para Linux versiones build anteriores a 800008302, revela parte del contenido del archivo de configuraci\u00f3n suministrado, lo que permite divulgar parcialmente archivos a los que el usuario no ten\u00eda acceso"
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
|
|
"attackVector": "NETWORK",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "LOW",
|
|
"integrityImpact": "NONE",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 5.3,
|
|
"baseSeverity": "MEDIUM"
|
|
},
|
|
"exploitabilityScore": 3.9,
|
|
"impactScore": 1.4
|
|
}
|
|
],
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "LOW",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "PARTIAL",
|
|
"integrityImpact": "NONE",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 5.0
|
|
},
|
|
"baseSeverity": "MEDIUM",
|
|
"exploitabilityScore": 10.0,
|
|
"impactScore": 2.9,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-209"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"source": "cve@checkpoint.com",
|
|
"type": "Secondary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-209"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:checkpoint:ssl_network_extender:r80.10:*:*:*:*:linux:*:*",
|
|
"matchCriteriaId": "424ECFFC-D92E-4040-AAD9-5A18ADAFE4B7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:*:*:*:*:linux:*:*",
|
|
"matchCriteriaId": "6E36C9C4-C1FF-44E4-9177-467EAD0983D7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:*:*:*:*:linux:*:*",
|
|
"matchCriteriaId": "726962E0-DF4B-4450-BF2F-F414A382CA78"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:*:*:*:*:linux:*:*",
|
|
"matchCriteriaId": "35346EB4-FDEC-4496-A90F-95EB35FA1532"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:checkpoint:ssl_network_extender:r81:*:*:*:*:linux:*:*",
|
|
"matchCriteriaId": "35E08CA8-803F-460D-BB1B-57FEC4DA10CF"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://supportcontent.checkpoint.com/solutions?id=sk173513",
|
|
"source": "cve@checkpoint.com",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
}
|
|
]
|
|
} |