What is CVE-2016-5722?

CVE-2016-5722 is a high-severity vulnerability in Huawei Ocean Stor 18500 V3, classified under Information Disclosure. CVSS score: 7.3/10. Published 2016-06-24.

How severe is CVE-2016-5722?

High severity. CVSS v3 base score is 7.3 out of 10.

Information disclosure in Huawei Ocean Stor 18500 V3

CVE-2016-5722

Huawei OceanStor 5300 V3, 5500 V3, 5600 V3, 5800 V3, 6800 V3, 18800 V3, and 18500 V3 before V300R003C10 sends the plaintext session token in the HTTP header, which allows remote attackers to conduct replay attacks and obtain sensitive information by sniffing the network.

Vulnerability class: Information Disclosure

EPSS: 0.007 (50.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2016-5722?: CVE-2016-5722 is a high-severity vulnerability in Huawei Ocean Stor 18500 V3, classified under Information Disclosure. CVSS score: 7.3/10. Published 2016-06-24.
How severe is CVE-2016-5722?: High severity. CVSS v3 base score is 7.3 out of 10.