CVE-2023-5937

Low

Description

On Windows systems, the Arc configuration files resulted to be world-readable. This can lead to information disclosure by local attackers, via exfiltration of sensitive data from configuration files.

SeverityLow
CVSS3.8
Exploit probability—
ProductArc
PublishedMay 15, 2024
First seenMay 15, 2024
Weakness typeCWE-538CWE-538

How to fix

Update
  • Nozomi Networks Arc1.6.0 or later

Affected products

ProductAffected versionsFixed in
Nozomi Networks Arcv < 1.6.01.6.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.