What is CVE-2023-5937?

CVE-2023-5937 is a low-severity vulnerability in Nozomi Networks Arc, classified under Insertion of Sensitive Information into Externally-Accessible File or Directory. CVSS score: 3.8/10. Published 2024-05-15.

How severe is CVE-2023-5937?

Low severity. CVSS v3 base score is 3.8 out of 10.

Information disclosure in Nozomi Networks Arc

CVE-2023-5937

On Windows systems, the Arc configuration files resulted to be world-readable. This can lead to information disclosure by local attackers, via exfiltration of sensitive data from configuration files.

EPSS: 0.001 (4.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.8 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N.

Affected products

Nozomi Networks Arc — versions 0

Weakness classification (CWE)

CWE-538 — Insertion of Sensitive Information into Externally-Accessible File or Directory

References

prodsec@nozominetworks.com

Frequently asked questions

What is CVE-2023-5937?: CVE-2023-5937 is a low-severity vulnerability in Nozomi Networks Arc, classified under Insertion of Sensitive Information into Externally-Accessible File or Directory. CVSS score: 3.8/10. Published 2024-05-15.
How severe is CVE-2023-5937?: Low severity. CVSS v3 base score is 3.8 out of 10.