CVE-2016-6650

Опубликовано: 21 мар. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 2.6

EPSS Низкий

Описание

EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected system.

Ссылки

http://www.securityfocus.com/archive/1/540303/30/0/threaded
Mitigation
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/96156
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038066
http://www.securityfocus.com/archive/1/540303/30/0/threaded
Mitigation
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/96156
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038066

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:emc:recoverpoint:*:*:*:*:*:*:*:*

Версия до 4.4.1.1 (включая)

cpe:2.3:a:emc:recoverpoint_for_virtual_machines:*:*:*:*:*:*:*:*

Версия до 4.4.1.1 (включая)

EPSS

Процентиль: 78%

0.0115

Низкий

7.5 High

CVSS3

2.6 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-vghq-q8x3-xh2x