CVE-2023-39004

Description

Insecure permissions in the configuration directory (/conf/) of OPNsense before 23.7 allow attackers to access sensitive information (e.g., hashed root password) which could lead to privilege escalation.

Related CPE's

References

https://logicaltrust.net/blog/2023/08/opnsense.html

http://opnsense.com

CvssV3 impact

CvssV2 impact