PT-2017-8772 · Omnimetrix · Omniview

Bill Voltmer · Publicado 2017-02-13 · Atualizado 2017-02-17 · CVE-2016-5786

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OmniMetrix OmniView version 1.2

Description An issue was discovered where the OmniView web application transmits credentials using the HTTP protocol, making them susceptible to being intercepted by an attacker, which could result in the compromise of account credentials.

Recommendations For OmniMetrix OmniView version 1.2, consider disabling the use of HTTP protocol for credential transmission until a secure alternative, such as HTTPS, is implemented to encrypt the data in transit.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-5786

Produtos afetados

Omniview

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-5786 · Aviso do Fabricante
• http://securityfocus.com/bid/94937 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-16-350-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-5786 · Nota de Segurança