CVE-2015-5293

Опубликовано: 24 авг. 2017

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot protocol" is set to None, which might allow remote attackers to communicate with a system designated to be unreachable.

Ссылки

https://access.redhat.com/security/cve/CVE-2015-5293
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1267714
Issue Tracking
VDB Entry
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2015-5293
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1267714
Issue Tracking
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:enterprise_virtualization_manager:*:*:*:*:*:*:*:*

Версия до 3.6.0 (включая)

EPSS

Процентиль: 51%

0.00281

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости