| Package | Affected versions | Patched versions |
|---|---|---|
| edgeconnect sd-wan orchestrator | = 9.7.0≥ 9.4.0, < 9.4.11≥ 9.5.0, < 9.5.9≥ 9.6.0, < 9.6.4 | 9.4.119.5.99.6.4 |
A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint. Successful exploitation could result in the disclosure of sensitive third-party API tokens and credentials, potentially enabling lateral movement to external security platforms.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free