CVE-2023-40251 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

Missing Encryption of Sensitive Data vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Man in the Middle Attack.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15.

Reserved 2023-08-11 | Published 2023-08-17 | Updated 2024-10-01 | Assigner krcert

MEDIUM: 5.2CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Problem types

CWE-311 Missing Encryption of Sensitive Data

Product status

Default status

affected

V4.0.0

affected

Default status

affected

V5.0.0

affected

Default status

affected

V5.0.0

affected

Default status

affected

V6.0.0

affected

References

docs.genians.com/...elease/ko/advisories/GN-SA-2023-001.html

cve.org (CVE-2023-40251)

nvd.nist.gov (CVE-2023-40251)

Download JSON

https://cve.threatint.com/CVE/CVE-2023-40251

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.