Vulnerability in Dell Vce Vision Intelligent Operations

CVE-2015-4056

The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which makes it easier for local users to discover credentials by leveraging administrative access.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.003 (19.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List, VDB Entry, Third Party Advisory)

Frequently asked questions

What is CVE-2015-4056?
CVE-2015-4056 is a medium-severity vulnerability in Dell Vce Vision Intelligent Operations, classified under Cryptographic Issues. CVSS score: 6.7/10. Published 2017-02-21.
How severe is CVE-2015-4056?
Medium severity. CVSS v3 base score is 6.7 out of 10.