CVE-2023-47131

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file.

La extensión N-able PassPortal anterior a 3.29.2 para Chrome inserta información confidencial en un archivo de registro.

*Credits: N/A

CVSS Scores

NISTv3.1 7.5

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

None

Automatable

Yes

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2023-10-30 CVE Reserved
2024-02-08 CVE Published
2024-02-16 EPSS Updated
2024-08-19 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-532: Insertion of Sensitive Information into Log File

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://me.n-able.com/s/security-advisory/aArHs000000M8CCKA0/cve202347131-passportal-browser-extension-logs-sensitive-data	2024-02-15

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
N-able Search vendor "N-able"	Passportal Search vendor "N-able" for product "Passportal"	< 3.29.2 Search vendor "N-able" for product "Passportal" and version " < 3.29.2"	-	Affected	in	Google Search vendor "Google"	Chrome Search vendor "Google" for product "Chrome"	-	-	Safe
N-able Search vendor "N-able"	Passportal Search vendor "N-able" for product "Passportal"	< 3.29.2 Search vendor "N-able" for product "Passportal" and version " < 3.29.2"	-	Affected	in	Microsoft Search vendor "Microsoft"	Edge Search vendor "Microsoft" for product "Edge"	-	-	Safe
N-able Search vendor "N-able"	Passportal Search vendor "N-able" for product "Passportal"	< 3.29.2 Search vendor "N-able" for product "Passportal" and version " < 3.29.2"	-	Affected	in	Mozilla Search vendor "Mozilla"	Firefox Search vendor "Mozilla" for product "Firefox"	-	-	Safe