Skip to content
CVE PROGRAM SOURCE RECORD5.2 Medium

CVE-2023-5937

Sensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.0

Description

On Windows systems, the Arc configuration files resulted to be world-readable. This can lead to information disclosure by local attackers, via exfiltration of sensitive data from configuration files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nozomi Networks Arc

Default version status: unaffected

  • 0 to < 1.6.0affected

References