CVE-2016-6152

Опубликовано: 26 июл. 2016

Источник: nvd

CVSS3: 8.8

CVSS2: 9

EPSS Низкий

Описание

CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors.

Ссылки

http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160721-01-security-notice-for-ca-ehealth.aspx
Patch
Permissions Required
Vendor Advisory
http://www.securityfocus.com/bid/92107
http://www.securitytracker.com/id/1036433
http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160721-01-security-notice-for-ca-ehealth.aspx
Patch
Permissions Required
Vendor Advisory
http://www.securityfocus.com/bid/92107
http://www.securitytracker.com/id/1036433

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:broadcom:ehealth:6.3:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.2:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.2.01:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.2.02:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.2.03:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.2.04:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.2.05:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.2.06:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.2.07:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.2.08:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.2.09:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.2.10:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.2.11:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:ehealth:6.3.2.12:*:*:*:*:*:*:*

cpe:2.3:a:ca:ehealth:6.2:*:*:*:*:*:*:*

cpe:2.3:a:ca:ehealth:6.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ca:ehealth:6.2.2:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01009

Низкий

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-vv46-mr2c-7pc5