CVE-2023-26560

2023-04-2500:00:00

mitre

www.cve.org

northern.tech

scheduled reports

file access

credentials discovery

cve-2023-26560

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.0%

JSON

Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to leverage the Scheduled Reports feature to read arbitrary files and potentially discover credentials.

References

cfengine.com/blog/2023/cve-2023-26560/