CVE-2021-30357

EUVD-2021-17288
SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
checkpointssl_network_extender
r80.10
checkpointssl_network_extender
r80.20
checkpointssl_network_extender
r80.30
checkpointssl_network_extender
r80.40
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://supportcontent.checkpoint.com/solutions?id=sk173513
https://supportcontent.checkpoint.com/solutions?id=sk173513