CVE-2016-9772

EPSS 0.26%
Veröffentlicht 06.02.2017 17:59:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Openafs ≫ Openafs Version <= 1.6.19

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.26%	0.469

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.openwall.com/lists/oss-security/2016/12/02/9

Patch

Third Party Advisory

Mailing List

http://www.securityfocus.com/bid/94651

Third Party Advisory

VDB Entry

https://www.openafs.org/pages/security/OPENAFS-SA-2016-003.txt

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-9772

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-9772

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-9772

EUVD