CVE-2016-5763

Vulnerability in Novell Open Enterprise Server (OES2015 SP1 before Scheduled Maintenance Update 10992, OES2015 before Scheduled Maintenance Update 10990, OES11 SP3 before Scheduled Maintenance Update 10991, OES11 SP2 before Scheduled Maintenance Update 10989) might allow authenticated remote attackers to perform unauthorized file access and modification.

CVSS v3.0 9.1 CRITICAL
CVSS v2.0 6.4 MEDIUM

9.1^/10

CVSS v3.0 : CRITICAL

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://download.novell.com/Download?buildid=Fj0Hdns7mxA~	Patch Release Notes
http://download.novell.com/Download?buildid=s9_RxhgC8KU~	Patch Release Notes
http://download.novell.com/Download?buildid=3Ho1yp5JOXA~	Patch Release Notes
http://download.novell.com/Download?buildid=dfqmrymc0Rg~	Patch Release Notes
http://www.securityfocus.com/bid/94348

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:novell:open_enterprise_server_2015::::::::
	cpe:2.3:a:novell:open_enterprise_server_11::sp2::::::*
	cpe:2.3:a:novell:open_enterprise_server_2015::sp1::::::*
	cpe:2.3:a:novell:open_enterprise_server_11::sp3::::::*

Information

Published : 2016-11-15 11:30

Updated : 2016-11-28 12:29

NVD link : CVE-2016-5763

Mitre link : CVE-2016-5763

JSON object : View

CWE

CWE-254

7PK - Security Features

Advertisement

Products Affected

novell

open_enterprise_server_11
open_enterprise_server_2015

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://download.novell.com/Download?buildid=Fj0Hdns7mxA~", "name": "http://download.novell.com/Download?buildid=Fj0Hdns7mxA~", "tags": ["Patch", "Release Notes"], "refsource": "CONFIRM"}, {"url": "http://download.novell.com/Download?buildid=s9_RxhgC8KU~", "name": "http://download.novell.com/Download?buildid=s9_RxhgC8KU~", "tags": ["Patch", "Release Notes"], "refsource": "CONFIRM"}, {"url": "http://download.novell.com/Download?buildid=3Ho1yp5JOXA~", "name": "http://download.novell.com/Download?buildid=3Ho1yp5JOXA~", "tags": ["Patch", "Release Notes"], "refsource": "CONFIRM"}, {"url": "http://download.novell.com/Download?buildid=dfqmrymc0Rg~", "name": "http://download.novell.com/Download?buildid=dfqmrymc0Rg~", "tags": ["Patch", "Release Notes"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/94348", "name": "94348", "tags": [], "refsource": "BID"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Vulnerability in Novell Open Enterprise Server (OES2015 SP1 before Scheduled Maintenance Update 10992, OES2015 before Scheduled Maintenance Update 10990, OES11 SP3 before Scheduled Maintenance Update 10991, OES11 SP2 before Scheduled Maintenance Update 10989) might allow authenticated remote attackers to perform unauthorized file access and modification."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-254"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2016-5763", "ASSIGNER": "security@suse.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "acInsufInfo": true, "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}}, "publishedDate": "2016-11-15T19:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:novell:open_enterprise_server_2015:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:novell:open_enterprise_server_11:*:sp2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:novell:open_enterprise_server_2015:*:sp1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:novell:open_enterprise_server_11:*:sp3:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2016-11-28T20:29Z"}