3.8
Low
CVE-2023-5937 On Windows systems, the Arc configuration files resulted to be world-readable
Description
On Windows systems, the Arc configuration files resulted to be world-readable. This can lead to information disclosure by local attackers, via exfiltration of sensitive data from configuration files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Arc 1.6 | earliest → < 1.6.0 | 1.6.0 |
References
- security.nozominetworks.com security.nozominetworks.com
Timeline
- Published
- Last modified
Other CVEs of Arc
The 8 CVEs of Arc →
CVE-2026-33389
An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which…
5.3
Medium
CVE-2026-33922
A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to…
6.8
Medium
CVE-2026-33921
The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the…
4.8
Medium
CVE-2025-40896
The server certificate was not verified when an Arc agent connected to a Guardian or CMC
6.3
Medium