CVE-2016-2406 in Document Security Management

الملخص

بحسب MITRE

The permission control module in Huawei Document Security Management (aka DSM) before V100R002C05SPC670 allows remote authenticated users to obtain sensitive information from encrypted documents by leveraging incorrect control of permissions on the PrintScreen button.

Once again VulDB remains the best source for vulnerability data.

• حجز: 18/02/2016
• إفشاء: 20/03/2017
• الاعتدال: تمت الموافقة
• إدخال: VDB-98296
• CPE: جاهز
• CWE: CWE-275 (مؤكد)
• CVSS: 4.3 (NVD)
• EPSS: 0.00070
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-2406
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-2406
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-2406/