Encryption Bypass in Stormshield SSL VPN Client
CVE-2022-46783

5.3MEDIUM

Key Information:

Vendor: Stormshield
Status: Ssl Vpn Client
Vendor: CVE Published:; 28 August 2023

🔔 Create Stormshield Vulnerability Alert

What is CVE-2022-46783?

An identified issue in Stormshield's SSL VPN Client prior to version 3.2.0 enables potential attackers to exploit multiple address books. This could lead to unauthorized access to information stored in other encrypted address books, compromising sensitive data and user privacy.

References

https://advisories.stormshield.eu/

https://advisories.stormshield.eu/2022-029/

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 28, 2023
Vulnerability Reserved
Dec 7, 2022

CVE-2022-46783 Data

JSON