CVE-2016-10680 in adamvr-geoip-lite

Riassunto

di MITRE

adamvr-geoip-lite is a light weight native JavaScript implementation of GeoIP API from MaxMind adamvr-geoip-lite downloads geoip resources over HTTP, which leaves it vulnerable to MITM attacks. This impacts the integrity and availability of this geoip data that may alter the decisions made by an application using this data.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 29/10/2017
• Divulgazione: 29/05/2018
• Moderazione: accettato
• Voce: VDB-118334
• CPE: pronto
• CWE: CWE-310 (confermato)
• CVSS: 8.1 (NVD)
• EPSS: 0.00717
• KEV: no
• Attività: molto basso
• Settore: Insurance, Finance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-10680
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-10680
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-10680/