CVE-2023-39004 (opnsense)

Insecure permissions in the configuration directory (/conf/) of OPNsense before 23.7 allow attackers to access sensitive information (e.g., hashed root password) which could lead to privilege escalation.

access attackers configuration cve directory escalation information insecure opnsense password permissions privilege privilege escalation root sensitive information