PT-2016-4902 · Apple · Hp Software Update

Publicado 2016-03-14 · Atualizado 2016-12-03 · CVE-2016-1731

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apple Software Update versions prior to 2.2 on Windows

Description The issue allows man-in-the-middle attackers to spoof updates by modifying the client-server data stream because it does not use HTTPS.

Recommendations For Apple Software Update versions prior to 2.2 on Windows, update to version 2.2 or later to resolve the issue.

Correção

Insufficient Verification of Data Authenticity

Enumeração de Fraquezas

CWE-310

CWE-345

Identificadores relacionados

CVE-2016-1731

Produtos afetados

Hp Software Update

Referências · 5

• http://securitytracker.com/id/1035256 · Nota
• https://support.apple.com/kb/HT206091 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-1731 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1731 · Nota de Segurança
• http://securityfocus.com/bid/84283 · Nota