Vulnerability in Dell Vce Vision Intelligent Operations
CVE-2015-4056
The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which makes it easier for local users to discover credentials by leveraging administrative access.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.003 (19.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Dell Vce_vision_intelligent_operations
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List, VDB Entry, Third Party Advisory)
Frequently asked questions
- What is CVE-2015-4056?
- CVE-2015-4056 is a medium-severity vulnerability in Dell Vce Vision Intelligent Operations, classified under Cryptographic Issues. CVSS score: 6.7/10. Published 2017-02-21.
- How severe is CVE-2015-4056?
- Medium severity. CVSS v3 base score is 6.7 out of 10.