Skip to content
OpenAdvisories
High · 7.2 CVE-2023-6916 EUVD-2023-59115GHSA-f874-8386-mf62

Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1

Published Apr 10, 2024 · Updated Sep 20, 2024 · Assigned by Nozomi

Description

Audit records for OpenAPI requests may include sensitive information.

This could lead to unauthorized accesses and privilege escalation.

Affected products

VendorProductAffectedFixed
Nozomi Networks Guardian < 23.4.1 23.4.1
Nozomi Networks CMC < 23.4.1 23.4.1

Advisories 2

References