Lucene search
HistoryMay 29, 2015 - 3:59 p.m.
CVE-2015-4069
cve
arcserve udp
edgeserviceimpl
sensitive credentials
exposure
nvd
6.5 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.944 High
EPSS
Percentile
99.2%
The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive credentials via a crafted SOAP request to the (1) getBackupPolicy or (2) getBackupPolicies method.
Affected configurations
Node
arcservearcserve_unified_data_protectionRange≤5.03
| CPE | Name | Operator | Version |
|---|---|---|---|
| arcserve:arcserve_unified_data_protection | arcserve arcserve unified data protection | le | 5.0 |
Related
checkpoint_advisories
checkpoint_advisories
cvelist
cvelist
CVE-2015-4069
2015-05-29 15:00:00
zdi
zdi
prion
prion
Security feature bypass
2015-05-29 15:59:00
nvd
nvd
CVE-2015-4069
2015-05-29 15:59:24
openvas
openvas
6.5 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.944 High
EPSS
Percentile
99.2%
Related for CVE-2015-4069