6.5
CVE-2019-16062
- EPSS 0.76%
- Veröffentlicht 19.03.2020 18:15:13
- Zuletzt bearbeitet 21.11.2024 04:29:58
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginNETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database. It is possible for an attacker to expose unencrypted sensitive data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netsas ≫ Enigma Network Management Solution Version <= 65.0.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.76% | 0.503 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
CWE-312 Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.