PT-2021-8823 · Vos · Vos

Published 2021-05-26 · Updated 2021-06-07 · CVE-2018-16499

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions VOS (affected versions not specified)

Description The issue allows an attacker at network endpoints to potentially view communications between an unsuspecting user and the service using man-in-the-middle attacks. Additionally, the use of unapproved SSH encryption protocols or cipher suites violates the Data Protection Technical Security Requirements.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2018-16499

Affected Products

Vos

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2018-16499 · Security Note
• https://hackerone.com/reports/1168196 · Note