CVE-2021-30357

SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access...

CVE-2021-30357

CVE-2021-30357 affects SSL Network Extender Client for Linux prior to build 800008302. The SNX binary runs with root privileges and can disclose parts of the supplied SNX config file, enabling partial exposure of files the user should not access (e.g., sensitive system contents). Public PoCs demo...

Check Point Response to CVE-2021-30357 - partial information disclosure in SNX client for Linux before build 800008302

Cause SNX can accept files with connection commands. If such a file contains wrong commands, SNX prints the line with unrecognized command. Since SNX runs as ROOT, an attacker can supply any file on the system and get one line of its content. If the file contains sensitive information, the attack...