CVE-2023-39004 (published 2023-08-09T00:00:00)
Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allow attackers to access sensitive information (e.g., hashed root password) which could lead to privilege escalation.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a