Skip to content
OpenAdvisories
Low · 3.8 CVE-2023-5937 EUVD-2023-58209GHSA-jwfg-733h-8pc5

Sensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.0

Published May 15, 2024 · Updated Sep 20, 2024 · Assigned by Nozomi

Description

On Windows systems, the Arc configuration files resulted to be world-readable.

This can lead to information disclosure by local attackers, via exfiltration of sensitive data from configuration files.

Affected products

VendorProductAffectedFixed
Nozomi Networks Arc < 1.6.0 1.6.0

References