CVE-2016-0907 - Vulnerability Details

Vendors	Products
Emc	Isilon Onefs Isilonsd Edge Onefs

Link	Providers
http://seclists.org/bugtraq/2016/May/117

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-05-26T00:00:00", "descriptions": [{"lang": "en", "value": "EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-01-09T16:57:01", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell"}, "references": [{"name": "20160526 ESA-2016-061: EMC Isilon OneFS SMB Signing Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://seclists.org/bugtraq/2016/May/117"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security_alert@emc.com", "ID": "CVE-2016-0907", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20160526 ESA-2016-061: EMC Isilon OneFS SMB Signing Vulnerability", "refsource": "BUGTRAQ", "url": "http://seclists.org/bugtraq/2016/May/117"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T22:38:40.520Z"}, "title": "CVE Program Container", "references": [{"name": "20160526 ESA-2016-061: EMC Isilon OneFS SMB Signing Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://seclists.org/bugtraq/2016/May/117"}]}]}, "cveMetadata": {"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2016-0907", "datePublished": "2016-05-30T01:00:00", "dateReserved": "2015-12-17T00:00:00", "dateUpdated": "2024-08-05T22:38:40.520Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2016-05-26T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-01-09T16:57:01 (string)

orgId : c550e75a-17ff-4988-97f0-544cde3820fe (string)

shortName : dell (string)

}

references : [ »

0 : { »

name : 20160526 ESA-2016-061: EMC Isilon OneFS SMB Signing Vulnerability (string)

tags : [ »

0 : mailing-list (string)

1 : x_refsource_BUGTRAQ (string)

]

url : http://seclists.org/bugtraq/2016/May/117 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : security_alert@emc.com (string)

ID : CVE-2016-0907 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 20160526 ESA-2016-061: EMC Isilon OneFS SMB Signing Vulnerability (string)

refsource : BUGTRAQ (string)

url : http://seclists.org/bugtraq/2016/May/117 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T22:38:40.520Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 20160526 ESA-2016-061: EMC Isilon OneFS SMB Signing Vulnerability (string)

tags : [ »

0 : mailing-list (string)

1 : x_refsource_BUGTRAQ (string)

2 : x_transferred (string)

]

url : http://seclists.org/bugtraq/2016/May/117 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : c550e75a-17ff-4988-97f0-544cde3820fe (string)

assignerShortName : dell (string)

cveId : CVE-2016-0907 (string)

datePublished : 2016-05-30T01:00:00 (string)

dateReserved : 2015-12-17T00:00:00 (string)

dateUpdated : 2024-08-05T22:38:40.520Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "2CD6F32C-BC12-455D-9C78-F6485C72582E", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "6521D899-186D-4200-96A2-C8137D6D8975", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "542839DF-EF0F-4B14-B56D-FBC0FE4D2787", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "B78EA29B-CD7A-4C9D-9B0C-E6888BEC82C4", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "A7A42792-B156-45D3-9A22-C45FFCF652DC", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "E706E435-8E45-4ACB-8BBC-5AC458378D4A", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "3FE2D48E-39E8-42E6-8E82-AB9FA0547BAC", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "DEDB97FE-6470-4AFE-A3B0-B664F132A190", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "A669BE6B-726F-4F34-A009-798E32FF6895", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "4AE74624-A44D-4837-AD36-DBF3E93D5ED9", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "47CBA2E5-6E46-4922-B56B-3F8C578074B1", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "90C22C93-9069-406E-9A14-03F20AD34D11", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "CDD30754-489E-42BA-8B51-1FEB5DC30912", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "D92501AC-0588-4051-9568-52074E8A2D33", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.7:*:*:*:*:*:*:*", "matchCriteriaId": "F7407DAA-7740-45B0-BA99-03794C8B1215", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.8:*:*:*:*:*:*:*", "matchCriteriaId": "F7E804DB-40F0-4FBF-8A85-A49767DC4022", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.9:*:*:*:*:*:*:*", "matchCriteriaId": "D645B5EF-4333-48BF-960A-03AA2D624376", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "0E8AF3E1-FE57-40B9-95DD-4E4C8EB578CB", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "10B1B998-AEEE-4123-82F3-72D84EF681DC", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "0828B061-28B4-4AEE-BBB9-AF287B90713C", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "064C487D-517E-4F7B-A182-5DF287477652", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:8.0.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "AB53E775-7A57-41D2-A93D-5F96D72622D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilonsd_edge_onefs:8.0.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "65394CAB-1CF8-4500-9013-A0B932ED703C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115."}, {"lang": "es", "value": "EMC Isilon OneFS 7.1.x y 7.2.x en versiones anteriores a 7.2.1.3 y 8.0.x en versiones anteriores a 8.0.0.1 e IsilonSD Edge OneFS 8.0.x en versiones anteriores a 8.0.0.1, no requiere la firma SMB dentro de una sesi\u00f3n DCERPC sobre ncacn_np, lo que permite a atacantes man-in-the-middle suplantar clientes SMB mediante la modificaci\u00f3n del flujo de datos cliente-servidor, un problema similar a CVE-2016-2115."}], "id": "CVE-2016-0907", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-05-30T01:59:00.237", "references": [{"source": "security_alert@emc.com", "tags": ["Third Party Advisory"], "url": "http://seclists.org/bugtraq/2016/May/117"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://seclists.org/bugtraq/2016/May/117"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-254"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 2CD6F32C-BC12-455D-9C78-F6485C72582E (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 6521D899-186D-4200-96A2-C8137D6D8975 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 542839DF-EF0F-4B14-B56D-FBC0FE4D2787 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.0.3:*:*:*:*:*:*:* (string)

matchCriteriaId : B78EA29B-CD7A-4C9D-9B0C-E6888BEC82C4 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.0.4:*:*:*:*:*:*:* (string)

matchCriteriaId : A7A42792-B156-45D3-9A22-C45FFCF652DC (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.0.5:*:*:*:*:*:*:* (string)

matchCriteriaId : E706E435-8E45-4ACB-8BBC-5AC458378D4A (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.0.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 3FE2D48E-39E8-42E6-8E82-AB9FA0547BAC (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : DEDB97FE-6470-4AFE-A3B0-B664F132A190 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : A669BE6B-726F-4F34-A009-798E32FF6895 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 4AE74624-A44D-4837-AD36-DBF3E93D5ED9 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 47CBA2E5-6E46-4922-B56B-3F8C578074B1 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 90C22C93-9069-406E-9A14-03F20AD34D11 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.5:*:*:*:*:*:*:* (string)

matchCriteriaId : CDD30754-489E-42BA-8B51-1FEB5DC30912 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.6:*:*:*:*:*:*:* (string)

matchCriteriaId : D92501AC-0588-4051-9568-52074E8A2D33 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.7:*:*:*:*:*:*:* (string)

matchCriteriaId : F7407DAA-7740-45B0-BA99-03794C8B1215 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.8:*:*:*:*:*:*:* (string)

matchCriteriaId : F7E804DB-40F0-4FBF-8A85-A49767DC4022 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.9:*:*:*:*:*:*:* (string)

matchCriteriaId : D645B5EF-4333-48BF-960A-03AA2D624376 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 0E8AF3E1-FE57-40B9-95DD-4E4C8EB578CB (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 10B1B998-AEEE-4123-82F3-72D84EF681DC (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 0828B061-28B4-4AEE-BBB9-AF287B90713C (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 064C487D-517E-4F7B-A182-5DF287477652 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:8.0.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : AB53E775-7A57-41D2-A93D-5F96D72622D1 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:o:emc:isilonsd_edge_onefs:8.0.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 65394CAB-1CF8-4500-9013-A0B932ED703C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115. (string)

}

1 : { »

lang : es (string)

value : EMC Isilon OneFS 7.1.x y 7.2.x en versiones anteriores a 7.2.1.3 y 8.0.x en versiones anteriores a 8.0.0.1 e IsilonSD Edge OneFS 8.0.x en versiones anteriores a 8.0.0.1, no requiere la firma SMB dentro de una sesión DCERPC sobre ncacn_np, lo que permite a atacantes man-in-the-middle suplantar clientes SMB mediante la modificación del flujo de datos cliente-servidor, un problema similar a CVE-2016-2115. (string)

}

]

id : CVE-2016-0907 (string)

lastModified : 2025-04-12T10:46:40.837 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 4.3 (number)

confidentialityImpact : NONE (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:M/Au:N/C:N/I:P/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 8.6 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.9 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 2.2 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2016-05-30T01:59:00.237 (string)

references : [ »

0 : { »

source : security_alert@emc.com (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : http://seclists.org/bugtraq/2016/May/117 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : http://seclists.org/bugtraq/2016/May/117 (string)

}

]

sourceIdentifier : security_alert@emc.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-254 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object