Lucene search

K
cve[email protected]CVE-2006-5746
HistoryNov 06, 2006 - 6:07 p.m.

CVE-2006-5746

2006-11-0618:07:00
web.nvd.nist.gov
20
cve-2006-5746
airmagnet enterprise
certificate validation
remote attack
mitm
nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.3%

The console in AirMagnet Enterprise before 7.5 build 6307 does not properly validate the Enterprise Server certificate, which allows remote attackers to read network traffic via a man-in-the-middle (MITM) attack, possibly related to the use of self-signed certificates.

Affected configurations

NVD
Node
airmagnetenterpriseMatch7.5

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.3%

Related for CVE-2006-5746