CVE

CVE-2023-39004

CVE-2023-39004

Insecure permissions in the configuration directory (/conf/) of OPNsense before 23.7 allow attackers to access sensitive information (e.g., hashed root password) which could lead to privilege escalation.

Source: CVE-2023-39004

Exit mobile version