Veracode Vulnerability DatabaseVERACODE:17814Information Disclosure
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
61.4%
Red Hat Enterprise Linux is vulnerable to information disclosure attacks. A remote user can exploit this flaw in the default ACI (Access Control Instructions). This information could be read by an anonymous user which could lead to leakage of sensitive information.
References
rhn.redhat.com/errata/RHSA-2016-2594.html
rhn.redhat.com/errata/RHSA-2016-2765.html
www.securityfocus.com/bid/99097
access.redhat.com/errata/RHSA-2016:2594
access.redhat.com/errata/RHSA-2016:2765
access.redhat.com/security/cve/CVE-2016-5416
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1349540
bugzilla.redhat.com/show_bug.cgi?id=1354331
bugzilla.redhat.com/show_bug.cgi?id=1376676
bugzilla.redhat.com/show_bug.cgi?id=1381153
rhn.redhat.com/errata/RHSA-2016-2765.html
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
61.4%