Описание
The management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:symantec:security_information_manager:4.7.0:*:*:*:*:*:*:*
cpe:2.3:a:symantec:security_information_manager:4.7.1:*:*:*:*:*:*:*
cpe:2.3:a:symantec:security_information_manager:4.7.2:*:*:*:*:*:*:*
cpe:2.3:a:symantec:security_information_manager:4.7.3:*:*:*:*:*:*:*
cpe:2.3:a:symantec:security_information_manager:4.7.4:*:*:*:*:*:*:*
cpe:2.3:a:symantec:security_information_manager:4.8.0:*:*:*:*:*:*:*
cpe:2.3:h:symantec:security_information_manager_appliance:-:*:*:*:*:*:*:*
EPSS
Процентиль: 30%
0.00114
Низкий
2.9 Low
CVSS2
Дефекты
CWE-200
Связанные уязвимости
github
больше 3 лет назад
The management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls.
EPSS
Процентиль: 30%
0.00114
Низкий
2.9 Low
CVSS2
Дефекты
CWE-200