What is CVE-2016-0894?

CVE-2016-0894 is a medium-severity vulnerability in Emc Rsa Data Loss Prevention, classified under CWE-254. CVSS score: 6.3/10. Published 2016-05-03.

How severe is CVE-2016-0894?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Vulnerability in Emc Rsa Data Loss Prevention

CVE-2016-0894

EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter.

EPSS: 0.012 (63.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Emc Rsa_data_loss_prevention — versions 9.6, 9.6.1, 9.6.2
N/a — versions n/a

Weakness classification (CWE)

CWE-254

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)
security_alert@emc.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2016-0894?: CVE-2016-0894 is a medium-severity vulnerability in Emc Rsa Data Loss Prevention, classified under CWE-254. CVSS score: 6.3/10. Published 2016-05-03.
How severe is CVE-2016-0894?: Medium severity. CVSS v3 base score is 6.3 out of 10.