CVE-2022-46782

The vulnerability CVE-2022-46782 affects Stormshield SSL VPN Client prior to 3.2.0. A logged-in user who can launch the VPNSSL Client can cause the bundled OpenVPN instance to execute code with administrator privileges on the local machine, enabling a local impact (high). Root cause is improper h...

CVE-2022-46783

CVE-2022-46783 affects Stormshield SSL VPN Client before 3.2.0. When multiple address books are configured, an attacker may access other encrypted address books, exposing confidential data. The issue is documented across multiple sources; remediation available: upgrade to version 3.2.0 or later ....

CVE-2021-27932

Stormshield Network Security (SNS) VPN SSL Client versions 2.1.0–2.8.0 are affected by insecure permissions (CVE-2021-27932). Root cause: insecure permissions as described in the CVE entry. Impact (per CVSS v3.1 in the entry): high confidentiality, integrity, and availability with a base score of...