Lucene search

AdobeCVE-2016-4169

HistoryAug 09, 2016 - 8:59 p.m.

CVE-2016-4169

2016-08-0920:59:01

CWE-200

adobe

web.nvd.nist.gov

cve-2016-4169

adobe experience manager

exp manager 6.0

exp manager 6.1

exp manager 6.2

audit log

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

Confidence

High

EPSS

0.002

Percentile

54.1%

JSON

Adobe Experience Manager 6.0, 6.1, and 6.2 allow attackers to obtain sensitive audit log event information via unspecified vectors.

Affected configurations

Nvd

Node

adobeexperience_managerMatch6.0.0

adobeexperience_managerMatch6.1.0

adobeexperience_managerMatch6.2.0

VendorProductVersionCPE
adobeexperience_manager6.0.0cpe:2.3:a:adobe:experience_manager:6.0.0:*:*:*:*:*:*:*
adobeexperience_manager6.1.0cpe:2.3:a:adobe:experience_manager:6.1.0:*:*:*:*:*:*:*
adobeexperience_manager6.2.0cpe:2.3:a:adobe:experience_manager:6.2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	experience_manager	6.0.0	cpe:2.3:a:adobe:experience_manager:6.0.0:::::::*
adobe	experience_manager	6.1.0	cpe:2.3:a:adobe:experience_manager:6.1.0:::::::*
adobe	experience_manager	6.2.0	cpe:2.3:a:adobe:experience_manager:6.2.0:::::::*

References

www.securityfocus.com/bid/92382

www.securitytracker.com/id/1036563

helpx.adobe.com/security/products/experience-manager/apsb16-27.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

Confidence

High

EPSS

0.002

Percentile

54.1%

JSON

Related for CVE-2016-4169