Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6433
HistoryMay 30, 2018 - 7:58 a.m.

Man-in-the-Middle (MitM)

2018-05-3007:58:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.002 Low

EPSS

Percentile

54.6%

ntfserver is vulnerable to man-in-the-middle (MitM) attacks. It is possible because it allows downloading of binary resources via HTTP. It can also lead to remote code execution (RCE) if the attacker replaces the requested binary with an attacker controlled binary being on the network or positioned in between the user and the remote server.

CPENameOperatorVersion
ntfserverle0.0.6

0.002 Low

EPSS

Percentile

54.6%