PT-2017-9366 · Unknown · Remote Service Manager

Published 2017-04-28 · Updated 2017-05-10 · CVE-2016-7815

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Remote Service Manager versions 3.0.0 through 3.1.4

Description The issue is related to the failure of Remote Service Manager to verify client certificates, potentially allowing remote attackers to gain access to systems on the network.

Recommendations For versions 3.0.0 through 3.1.4, update to a version that properly verifies client certificates to prevent unauthorized access.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2016-7815

Affected Products

Remote Service Manager

References · 5

• https://support.cybozu.com/ja-jp/article/9689 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-7815 · Security Note
• https://osv.dev/vulnerability/CVE-2016-7815 · Vendor Advisory
• http://securityfocus.com/bid/95379 · Note
• http://jvn.jp/en/jp/JVN19241292/index.html · Note