CVE-2023-6916 - Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1

HIGH

Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1

Published Apr 10, 2024

7.5

HIGH

CVSS 4.0

EPSS 0.57%

Audit records for OpenAPI requests may include sensitive information.

This could lead to unauthorized accesses and privilege escalation.

Vendor Nozomi Networks Product CMC Default
unaffected
Affected
- ≥ 0, < 23.4.1
Vendor Nozomi Networks Product Guardian Default
unaffected
Affected
- ≥ 0, < 23.4.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Nozomi Networks	CMC	unaffected	Affected ≥ 0, < 23.4.1
Nozomi Networks	Guardian	unaffected	Affected ≥ 0, < 23.4.1

Vendor Nozominetworks Product Central Management Control Default
unaffected
Affected
- ≥ 0, < 23.4.1
Vendor Nozominetworks Product Guardian Default
unaffected
Affected
- ≥ 0, ≤ 23.4.1