CVE-2016-2079

Опубликовано: 03 июл. 2016

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote attackers to obtain sensitive information via unspecified vectors.

Ссылки

http://www.securitytracker.com/id/1036077
http://www.vmware.com/security/advisories/VMSA-2016-0007.html
Patch
Vendor Advisory
http://www.securitytracker.com/id/1036077
http://www.vmware.com/security/advisories/VMSA-2016-0007.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vmware:nsx_edge:6.1.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:nsx_edge:6.1.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:nsx_edge:6.1.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:nsx_edge:6.1.4:*:*:*:*:*:*:*

cpe:2.3:a:vmware:nsx_edge:6.1.5:*:*:*:*:*:*:*

cpe:2.3:a:vmware:nsx_edge:6.1.6:*:*:*:*:*:*:*

cpe:2.3:a:vmware:nsx_edge:6.2.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:nsx_edge:6.2.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:nsx_edge:6.2.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.3:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.3.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.4:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.4.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vcloud_networking_and_security_edge:5.5.4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00392

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-384x-vf8j-86f2