VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 26, 2023· Updated Jun 17, 2026

CVE-2023-28616

CVE-2023-28616

Description

An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.x before 4.7.1. It affects user accounts for which the password has an equals sign or space character. The serverd process logs such passwords in cleartext, and potentially sends these logs to the Syslog component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Stormshield/Stormshield Network Security2 versions
    cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*range: >=2.7.0,<4.3.17
    • cpe:2.3:a:stormshield:stormshield_network_security:4.7.0:*:*:*:*:*:*:*
  • Stormshield/Network Security (SNS)cpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.x before 4.7.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.