| Package | Affected versions | Patched versions |
|---|---|---|
| edgeconnect sd-wan orchestrator | = 9.7.0≥ 9.4.0, < 9.4.11≥ 9.5.0, < 9.5.9≥ 9.6.0, < 9.6.4 | 9.4.119.5.99.6.4 |
Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery (SSRF) attacks. A successful exploit allows an attacker to enumerate information about the internal structure of the EdgeConnect SD-WAN Orchestrator host leading to potential disclosure of sensitive information beyond what is authorized by the user's existing privilege level.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free