Lucene search
MitreCVE-2015-4069HistoryMay 29, 2015 - 3:59 p.m.
CVE-2015-4069
2015-05-2915:59:24
CWE-200
mitre
web.nvd.nist.gov
27
cve
arcserve udp
edgeserviceimpl
sensitive credentials
exposure
nvd
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.93
Percentile
99.1%
The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive credentials via a crafted SOAP request to the (1) getBackupPolicy or (2) getBackupPolicies method.
Affected configurations
Node
arcservearcserve_unified_data_protectionRange≤5.03
| Vendor | Product | Version | CPE |
|---|---|---|---|
| arcserve | arcserve_unified_data_protection | * | cpe:2.3:a:arcserve:arcserve_unified_data_protection:*:3:*:*:*:*:*:* |
Related
checkpoint_advisories
checkpoint_advisories
cvelist
cvelist
CVE-2015-4069
2015-05-29 15:00:00
zdi
zdi
prion
prion
Security feature bypass
2015-05-29 15:59:00
nvd
nvd
CVE-2015-4069
2015-05-29 15:59:24
openvas
openvas
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.93
Percentile
99.1%
Related for CVE-2015-4069