Lucene search

K
cve[email protected]CVE-2012-2150
HistoryAug 25, 2015 - 5:59 p.m.

CVE-2012-2150

2015-08-2517:59:00
CWE-200
web.nvd.nist.gov
105
cve-2012-2150
xfs_metadump
xfsprogs
file data obfuscation
sensitive information disclosure
remote attackers
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.8 Medium

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.5%

xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.

Affected configurations

NVD
Node
sgixfsprogsRange3.2.3
CPENameOperatorVersion
sgi:xfsprogssgi xfsprogsle3.2.3

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.8 Medium

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.5%