Debug Message Reveals Unnecessary Information Vulnerability in Dell BSAFE SSL-J

CVE-2023-28077

What is CVE-2023-28077?

A vulnerability exists in Dell BSAFE SSL-J that allows the disclosure of unnecessary information through a debug message. This issue affects versions prior to 6.5 and versions 7.0 and 7.1. A locally privileged user could exploit this vulnerability to access sensitive information, posing potential security risks to the integrity of the system. Organizations using these affected versions should apply the necessary security updates to mitigate risks associated with this vulnerability.

References