CVE-2023-47131

The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://me.n-able.com/s/security-advisory/aArHs000000M8CCKA0/cve202347131-passportal-browser-extension-logs-sensitive-data	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:n-able:passportal:*:*:*:*:*:*:*:*

OR	cpe:2.3:a:google:chrome:-:::::::*
	cpe:2.3:a:microsoft:edge:-:::::::*
	cpe:2.3:a:mozilla:firefox:-:::::::*

History

15 Feb 2024, 16:59

Type	Values Removed	Values Added
First Time		Google Mozilla N-able passportal Microsoft N-able Microsoft edge Mozilla firefox Google chrome
Summary		(es) La extensión N-able PassPortal anterior a 3.29.2 para Chrome inserta información confidencial en un archivo de registro.
References	~~() https://me.n-able.com/s/security-advisory/aArHs000000M8CCKA0/cve202347131-passportal-browser-extension-logs-sensitive-data -~~	() https://me.n-able.com/s/security-advisory/aArHs000000M8CCKA0/cve202347131-passportal-browser-extension-logs-sensitive-data - Vendor Advisory
CWE		CWE-532
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.5
CPE		cpe:2.3:a:google:chrome:-:::::::* cpe:2.3:a:microsoft:edge:-:::::::* cpe:2.3:a:mozilla:firefox:-:::::::* cpe:2.3:a:n-able:passportal::::::::

08 Feb 2024, 23:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-02-08 23:15

Updated : 2024-02-15 16:59

NVD link : CVE-2023-47131

Mitre link : CVE-2023-47131

CVE.ORG link : CVE-2023-47131

JSON object : View

Products Affected

n-able

passportal

google

chrome

microsoft

edge

mozilla

firefox

CWE

CWE-532

Insertion of Sensitive Information into Log File

7.5 /10