CVE-2023-39004

n/a / n/a PUBLISHED

Description (CNA)

Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allow attackers to access sensitive information (e.g., hashed root password) which could lead to privilege escalation.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://logicaltrust.net/blog/2023/08/opnsense.html

ADP enrichment

CVE

No English description supplied.

https://logicaltrust.net/blog/2023/08/opnsense.html

CISA-ADP

No English description supplied.

No references supplied.