9.8

CVE-2015-6237

EPSS 1.67%
Veröffentlicht 27.12.2017 19:29:00
Zuletzt bearbeitet 13.05.2026 00:24:29
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The RPC service in Tripwire (formerly nCircle) IP360 VnE Manager 7.2.2 before 7.2.6 allows remote attackers to bypass authentication and (1) enumerate users, (2) reset passwords, or (3) manipulate IP filter restrictions via crafted "privileged commands."

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Tripwire ≫ Ip360 Version7.2.2

Tripwire ≫ Ip360 Version7.2.4

Tripwire ≫ Ip360 Version7.2.5

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.67%	0.737

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://seclists.org/fulldisclosure/2015/Oct/20

Third Party Advisory

Mailing List

http://www.securityfocus.com/archive/1/536609/100/0/threaded

https://nvd.nist.gov/vuln/detail/CVE-2015-6237

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-6237

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-6237

EUVD