CVE-2023-28077 - Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability

Back Back to CVE browser

MEDIUM

Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability

Published Feb 10, 2024

4.4

MEDIUM

CVSS 3.1

EPSS 0.18%

Description

Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information to a locally privileged user.

Affected products

Vendor Dell Product Dell BSAFE SSL-J Default
unaffected
Affected
- ≥ 6.0.x, ≤ 6.5
- ≥ 7.0, ≤ 7.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Dell	Dell BSAFE SSL-J	unaffected	Affected ≥ 6.0.x, ≤ 6.5 ≥ 7.0, ≤ 7.1

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-1295

CWE-200

Exposure of Sensitive Information

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31802
Advisory
https://www.dell.com/support/kbdoc/en-us/000214287/dsa-2023-156-dell-bsafe-ssl-j-7-1-1-security-update
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31802		Advisory
https://www.dell.com/support/kbdoc/en-us/000214287/dsa-2023-156-dell-bsafe-ssl-j-7-1-1-security-update		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Feb 10, 2024

Updated Aug 2, 2024

Reserved Mar 10, 2023

Link CVE-2023-28077

CISA Vulnrichment

Updated Feb 12, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-28077

Red Hat

No data

ENISA EUVD

Assigner dell

Published Feb 10, 2024

Updated Aug 2, 2024

Link EUVD-2023-31802

GitHub

No data