CVE-2023-28869: Medium severity ncp-e secure enterprise client vulnerability
Published Dec 9, 2023
·Updated
Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symbolic link.
Affected Software
1 affected component
ncp-e Secure Enterprise Client<12.22
Event History
Dec 9, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-28869?
CVE-2023-28869 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2023-28869?
To mitigate CVE-2023-28869, upgrade the NCP Secure Enterprise Client to version 12.22 or later.
3
What can an attacker do with CVE-2023-28869?
An attacker can exploit CVE-2023-28869 to read the contents of arbitrary files on the operating system.
4
Which versions of NCP Secure Enterprise Client are affected by CVE-2023-28869?
NCP Secure Enterprise Client versions before 12.22 are affected by CVE-2023-28869.
5
Is there a workaround for CVE-2023-28869?
There is no official workaround; the best course of action is to update the software to the fixed version.