CVE-2022-46783 Information disclosure in n/a
An attacker can access other encrypted address books in Stormshield SSL VPN Client when multiple address books are used.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-46783?
CVE-2022-46783 is a medium-severity vulnerability in n/a, published on 28 Aug 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book.
Weakness: CWE-326
Which versions are affected by CVE-2022-46783?
It affects 1 product.
Products include Stormshield Ssl Vpn Client.
How do I fix CVE-2022-46783?
No fix has been published for CVE-2022-46783 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-46783 being exploited?
There is no known exploitation of CVE-2022-46783 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-hpfr-fh2j-j4m2.