CVE-2016-8229 in Service Bridge

Summary

A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 09/16/2016
• Disclosure: 06/04/2017
• Moderation: VulDB entry created
• Entries: VDB-101933 (1)
• CPE: ready
• CWE: CWE-352 (Confirmed)
• CVSS: 6.5
• EPSS: 0.00159
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8229
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8229
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8229/