PT-2015-2271 · Apple · Os X+1

Publicado

2015-10-09

·

Atualizado

2016-12-09

·

CVE-2015-5853

CVSS v2.0

3.3

Baixa

VetorAV:A/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions AirScan in Apple OS X versions prior to 10.11
Description The issue is related to a lack of protection for service data in the AirScan component. It may allow an attacker to obtain access to data contained in eSCL packets by conducting man-in-the-middle attacks.
Recommendations For AirScan in Apple OS X versions prior to 10.11, update to version 10.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the AirScan component to minimize the risk of exploitation.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2015-11625
CVE-2015-5853

Produtos afetados

Airscan
Os X