Senstar Symphony Information Disclosure Vulnerability via FetchStoredLicense Method

A vulnerability allowing remote information disclosure has been identified in Senstar Symphony. This issue arises from the FetchStoredLicense method, which improperly exposes sensitive information, including stored credentials. The vulnerability can be exploited without authentication, potentially leading to further compromise on the affected system.

Impact

Exploitation of this vulnerability allows for unauthorized access to sensitive information, specifically stored credentials, which could be used for further exploitation or compromise of the system.

Remediation

Users can upgrade to Senstar Symphony version 8.11 or later to address this vulnerability.