| Package | Affected versions | Patched versions |
|---|---|---|
| opnsense | < 23.7 | 23.7 |
Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allow attackers to access sensitive information (e.g., hashed root password) which could lead to privilege escalation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free