Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2022-34888

Summary
Assigner-lenovo
Assigner Org ID-da227ddf-6e25-4b41-b023-0f976dcaca4b
Published At-30 Jan, 2023 | 21:41
Updated At-27 Mar, 2025 | 18:51
Rejected At-
Credits

The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:lenovo
Assigner Org ID:da227ddf-6e25-4b41-b023-0f976dcaca4b
Published At:30 Jan, 2023 | 21:41
Updated At:27 Mar, 2025 | 18:51
Rejected At:
▼CVE Numbering Authority (CNA)

The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.

Affected Products
Vendor
Lenovo Group LimitedLenovo
Product
Lenovo XClarity Controller
Default Status
unaffected
Versions
Affected
  • various
Problem Types
TypeCWE IDDescription
CWECWE-184CWE-184: Incomplete List of Disallowed Inputs
Type: CWE
CWE ID: CWE-184
Description: CWE-184: Incomplete List of Disallowed Inputs
Metrics
VersionBase scoreBase severityVector
3.12.7LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Version: 3.1
Base score: 2.7
Base severity: LOW
Vector:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Update to the Lenovo XClarity Controller (XCC) version (or higher) as recommended in the Product Impact section in LEN-87734.

Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://support.lenovo.com/us/en/product_security/LEN-87734
N/A
Hyperlink: https://support.lenovo.com/us/en/product_security/LEN-87734
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://support.lenovo.com/us/en/product_security/LEN-87734
x_transferred
Hyperlink: https://support.lenovo.com/us/en/product_security/LEN-87734
Resource:
x_transferred
2. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:psirt@lenovo.com
Published At:30 Jan, 2023 | 22:15
Updated At:08 Feb, 2023 | 22:18

The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.14.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Secondary3.12.7LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Type: Primary
Version: 3.1
Base score: 4.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Type: Secondary
Version: 3.1
Base score: 2.7
Base severity: LOW
Vector:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CPE Matches
Lenovo Group Limited
lenovo
>>thinkagile_vx3331_firmware>>Versions before 1.80_afbt20n(exclusive)
cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_vx3331>>-
cpe:2.3:h:lenovo:thinkagile_vx3331:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx_enclosure_certified_node_firmware>>Versions before 5.20_tei3c8m(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx_enclosure_certified_node_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx_enclosure_certified_node>>-
cpe:2.3:h:lenovo:thinkagile_hx_enclosure_certified_node:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx1021_firmware>>Versions before 3.60_tei386m(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx1021_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx1021>>-
cpe:2.3:h:lenovo:thinkagile_hx1021:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx1320_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx1320_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx1320>>-
cpe:2.3:h:lenovo:thinkagile_hx1320:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx1321_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx1321>>-
cpe:2.3:h:lenovo:thinkagile_hx1321:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx1520-r_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx1520-r>>-
cpe:2.3:h:lenovo:thinkagile_hx1520-r:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx1521-r_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx1521-r>>-
cpe:2.3:h:lenovo:thinkagile_hx1521-r:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx2320-e_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx2320-e>>-
cpe:2.3:h:lenovo:thinkagile_hx2320-e:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx2321_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx2321>>-
cpe:2.3:h:lenovo:thinkagile_hx2321:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx2720-e_firmware>>Versions before 5.20_tei3c8m(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx2720-e>>-
cpe:2.3:h:lenovo:thinkagile_hx2720-e:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3320_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx3320_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3320>>-
cpe:2.3:h:lenovo:thinkagile_hx3320:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3321_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3321>>-
cpe:2.3:h:lenovo:thinkagile_hx3321:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3375_firmware>>Versions before 4.10_d8bt38l(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3375>>-
cpe:2.3:h:lenovo:thinkagile_hx3375:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3376_firmware>>Versions before 4.10_d8bt38l(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3376>>-
cpe:2.3:h:lenovo:thinkagile_hx3376:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3520-g_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3520-g>>-
cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3521-g_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3521-g>>-
cpe:2.3:h:lenovo:thinkagile_hx3521-g:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3720_firmware>>Versions before 5.20_tei3c8m(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx3720_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3720>>-
cpe:2.3:h:lenovo:thinkagile_hx3720:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3721_firmware>>Versions before 5.20_tei3c8m(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx3721>>-
cpe:2.3:h:lenovo:thinkagile_hx3721:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx5520_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx5520_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx5520>>-
cpe:2.3:h:lenovo:thinkagile_hx5520:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx5520-c_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx5520-c>>-
cpe:2.3:h:lenovo:thinkagile_hx5520-c:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx5521_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx5521>>-
cpe:2.3:h:lenovo:thinkagile_hx5521:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx5521-c_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx5521-c>>-
cpe:2.3:h:lenovo:thinkagile_hx5521-c:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx7520_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx7520_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx7520>>-
cpe:2.3:h:lenovo:thinkagile_hx7520:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx7521_firmware>>Versions before 8.40-cdi394n(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx7521>>-
cpe:2.3:h:lenovo:thinkagile_hx7521:-:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx7820_firmware>>Versions before 2.50_psi346l(exclusive)
cpe:2.3:o:lenovo:thinkagile_hx7820_firmware:*:*:*:*:*:*:*:*
Lenovo Group Limited
lenovo
>>thinkagile_hx7820>>-
cpe:2.3:h:lenovo:thinkagile_hx7820:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-697Primarynvd@nist.gov
CWE-184Secondarypsirt@lenovo.com
CWE ID: CWE-697
Type: Primary
Source: nvd@nist.gov
CWE ID: CWE-184
Type: Secondary
Source: psirt@lenovo.com
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://support.lenovo.com/us/en/product_security/LEN-87734psirt@lenovo.com
Vendor Advisory
Hyperlink: https://support.lenovo.com/us/en/product_security/LEN-87734
Source: psirt@lenovo.com
Resource:
Vendor Advisory

Change History

0
Information is not available yet

Similar CVEs

3Records found
CVE-2022-34887
Matching Score-8
Assigner-Lenovo Group Ltd.
ShareView Details
Matching Score-8
Assigner-Lenovo Group Ltd.
CVSS Score-4.3||MEDIUM
EPSS-0.09% / 25.78%
||
7 Day CHG~0.00%
Published-27 Oct, 2023 | 18:48
Updated-09 Sep, 2024 | 19:33
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate with the administrator password.

Action-Not Available
Vendor-Lenovo Group Limited
Product-gm266dns_firmwaregm266dnsg263dns_firmwareg263dnsgm265dngm265dn_firmwarePrinter GM265DN (production date July 2022 and later)Printer GM266DNSPrinter GM265DN (production date June 2022 and before)Printer G263DNS
CWE ID-CWE-287
Improper Authentication
CVE-2024-8059
Matching Score-8
Assigner-Lenovo Group Ltd.
ShareView Details
Matching Score-8
Assigner-Lenovo Group Ltd.
CVSS Score-4.3||MEDIUM
EPSS-0.07% / 20.35%
||
7 Day CHG~0.00%
Published-13 Sep, 2024 | 17:27
Updated-14 Sep, 2024 | 11:47
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.

Action-Not Available
Vendor-Lenovo Group Limited
Product-VX7531 Certified Node (ThinkAgile) XCCHX7820 Appliance (ThinkAgile) XCCSR250 V2 (ThinkSystem) XCCVX5530 Appliance (ThinkAgile) XCCHX2331 Certified Node (ThinkAgile) XCCSR650 (ThinkSystem) XCCVX3530-G Appliance (ThinkAgile) XCCHX5531 Certified Node (ThinkAgile) XCCHX5530 Appliance (ThinkAgile) XCCVX7320 N (ThinkAgile) XCCHX1321 Certified Node (ThinkAgile) XCCVX635 V3 Integrated System (ThinkAgile) XCCVX7330 Appliance (Thinkagile) XCCST250 V3 (ThinkSystem) XCCSR258 V2 (ThinkSystem) XCCSE455 V3 (ThinkEdge) XCCSR150 (ThinkSystem) XCCHX Enclosure Certified Node (ThinkAgile) XCCSR630 V3 (ThinkSystem) XCCSR665 V3 (ThinkSystem) XCCVX 1SE Certified Node (ThinkAgile) XCCSE360 V2 (ThinkEdge) XCCHX7530 Appl for SAP HANA (ThinkAgile) XCCSR250 V3 (ThinkSystem) XCCSD650-N V2 (ThinkSystem) XCCHX1521-R Certified Node (ThinkAgile) XCCSR650 V3 (ThinkSystem) XCCSR860 V3 (ThinkSystem) XCCVX3320 (ThinkAgile) XCCHX5520-C Appliance (ThinkAgile) XCCSN850 (ThinkSystem) XCCSR655 V3 (ThinkSystem) XCCSR850P (ThinkSystem) XCCSD665 V3 (ThinkSystem) XCCST550 (ThinkSystem) XCCHX5521 Certified Node (ThinkAgile) XCCST250 V2 (ThinkSystem) XCCSR570 (ThinkSystem) XCCHX3331 Node SAP HANA (ThinkAgile) XCCSR630 V2 (ThinkSystem) XCCHX3330 Appliance (ThinkAgile) XCCHX3376 Certified Node (ThinkAgile) XCCSD550 V3 (ThinkSystem) XCCSR850 V2 (ThinkSystem) XCCST258 V2 (ThinkSystem) XCCSR850 (ThinkSystem) XCCSR675 V3 (ThinkSystem) XCCMX3331-F All-flash Certified node (ThinkAgile) XCCHX7531 Certified Node (ThinkAgile) XCCVX 2U4N Certified Node (ThinkAgile) XCCVX645 V3 Certified Node (ThinkAgile) XCCSR258 V3 (ThinkSystem) XCCHX1021 Edge Certified Node 3yr (ThinkAgile) XCCSR650 V2 (ThinkSystem) XCCVX3520-G (ThinkAgile) XCCVX7820 (ThinkAgile) XCCHX7530 Appliance (ThinkAgile) XCCST250 (ThinkSystem) XCCSE450 (ThinkEdge) XCCSD650 V3 (ThinkSystem) XCCSD650 DWC Dual Node Tray (ThinkSystem) XCCP920 Rack Workstation (ThinkStation) XCCVX5520 (ThinkAgile) XCCSN550 (ThinkSystem) XCCSR645 V3 (ThinkSystem) XCCVX655 V3 Integrated System (ThinkAgile) XCCMX3330-H Hybrid Appliance (ThinkAgile) XCCHX3321 Certified Node (ThinkAgile) XCCHX5520 Appliance (ThinkAgile) XCCHX7531 Node SAP HANA (ThinkAgile) XCCVX645 V3 Integrated System (ThinkAgile) XCCHX5521-C Certified Node (ThinkAgile) XCCSR860 (ThinkSystem) XCCSE350 V2 (ThinkEdge) XCCVX665 V3 Certified Node (ThinkAgile) XCCSR665 (ThinkSystem) XCCVX655 V3 Certified Node (ThinkAgile) XCCST658 V3 (ThinkSystem) XCCHX1320 Appliance (ThinkAgile) XCCVX2320 (ThinkAgile) XCCMX3530 F All flash Appliance (ThinkAgile) XCCST258 (ThinkSystem) XCCSE350 (ThinkSystem) XCCST658 V2 (ThinkSystem) XCCSR530 (ThinkSystem) XCCHX7520 Appliance (ThinkAgile) XCCSD530 V3 (ThinkSystem) XCCVX3330 Appliance (ThinkAgile) XCCSR670 V2 (ThinkSystem) XCCSR860 V2 (ThinkSystem) XCCHX2720-E Appliance (ThinkAgile) XCCHX2330 Appliance (ThinkAgile) XCCMX Edge Appliance - MX1020 (ThinkAgile) XCCSD650 V2 (ThinkSystem) XCCSR850 V3 (ThinkSystem) XCCHX3375 Appliance (ThinkAgile) XCCST650 V2 (ThinkSystem) XCCST258 V3 (ThinkSystem) XCCSR670 (ThinkSystem) XCCHX1331 Certified Node (ThinkAgile) XCCVX2330 Appliance (ThinkAgile) XCCVX3720 (ThinkAgile) XCCSR158 (ThinkSystem) XCCHX3331 Certified Node (ThinkAgile) XCCSD530 (ThinkSystem) XCCMX3330-F All-flash Appliance (ThinkAgile) XCCHX1520-R Appliance (ThinkAgile) XCCSR950 V3 (ThinkSystem) XCCHX3320 Appliance (ThinkAgile) XCCSR550 (ThinkSystem) XCCSR950 (ThinkSystem) XCCSR635 V3 (ThinkSystem) XCCThinkAgile MX1021 on SE350 XCCSR250 (ThinkSystem) XCCVX665 V3 Integrated System (ThinkAgile) XCCHX2321 Certified Node (ThinkAgile) XCCHX3521-G Certified Node (ThinkAgile) XCCHX3520-G Appliance (ThinkAgile) XCCHX3720 Appliance (ThinkAgile) XCCHX3721 Certified Node (ThinkAgile) XCCVX 4U Certified Node (ThinkAgile) XCCSN550 V2 (ThinkSystem) XCCHX7521 Certified Node (ThinkAgile) XCCSR645 (ThinkSystem) XCCST650 V3 (ThinkSystem) XCCMX3331-H Hybrid Certified node (ThinkAgile) XCCMX3530-H Hybrid Appliance (ThinkAgile) XCCVX3331 Certified Node (ThinkAgile) XCCMX3531 H Hybrid Certified node (ThinkAgile) XCCSR590 (ThinkSystem) XCCHX2320-E Appliance (ThinkAgile) XCCVX1320 (ThinkAgile) XCCVX7530 Appliance (ThinkAgile) XCCMX3531-F All-flash Certified node (ThinkAgile) XCCVX7520 (ThinkAgile) XCCHX7821 Certified Node (ThinkAgile) XCCVX7520 N (ThinkAgile) XCCSR258 (ThinkSystem) XCCSR630 (ThinkSystem) XCCSD630 V2 (ThinkSystem) XCC
CWE ID-CWE-319
Cleartext Transmission of Sensitive Information
CVE-2016-6189
Matching Score-4
Assigner-MITRE Corporation
ShareView Details
Matching Score-4
Assigner-MITRE Corporation
CVSS Score-4.3||MEDIUM
EPSS-0.17% / 39.11%
||
7 Day CHG~0.00%
Published-17 Feb, 2017 | 17:00
Updated-20 Apr, 2025 | 01:37
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.

Action-Not Available
Vendor-n/aAlinto
Product-sogon/a
CWE ID-CWE-184
Incomplete List of Disallowed Inputs
Details not found