CVE-2023-47131: The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file

High severity · published Feb 8, 2024

CVE-2023-47131

The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file

7.5

CVSS

0.5%

EPSS

On KEV

Description

The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

None

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 42% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Passportal · N-able

before 3.29.2 · source: NVD

Affected product

Passportal

N-able

All Passportal CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-47131

CVE.org

https://www.cve.org/CVERecord?id=CVE-2023-47131

Vendor Advisory

https://me.n-able.com/s/security-advisory/aArHs000000M8CCKA0/cve202347131-passportal-browser-extension-logs-sensitive-data