medium6.5
CVE-2023-26560
Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to leverage the Scheduled Reports feature to read arbitrary files and po…
Impact
Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to leverage the Scheduled Reports feature to read arbitrary files and potentially discover credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Northern.Tech | Cfengine | from 3.6.0 before 3.21.1 |