CVEvulnerability

CVE-2023-28616

7.5 HIGH Published 2023-12-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-319

Description

An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.x before 4.7.1. It affects user accounts for which the password has an equals sign or space character. The serverd process logs such passwords in cleartext, and potentially sends these logs to the Syslog component.

Affected configurations

• stormshield stormshield network security (>= 2.7.0 < 4.3.17) • stormshield stormshield network security (>= 4.4.0 < 4.6.4) • stormshield stormshield network security 4.7.0

Related

Weakness · CWE (1)

  • CWE-319 Cleartext Transmission of Sensitive Information weakness

References