What is CVE-2020-6865?

CVE-2020-6865 is a medium-severity vulnerability in ZTE Oscp, classified under Information Disclosure. CVSS score: 6.5/10. Published 2020-04-30.

How severe is CVE-2020-6865?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Information disclosure in ZTE Oscp

CVE-2020-6865

ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimize the response of failure to the request, the caller can directly view the internal error code location of the component. Attackers could exploit this vulnerability to obtain sensitive information. This affects: OSCP versions V16.19.10 and V16.19.20.

Vulnerability class: Information Disclosure

EPSS: 0.009 (55.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Zte Oscp — versions 16.19.10, 16.19.20
N/a Oscp — versions V16.19.10, V16.19.20

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@zte.com.cn (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-6865?: CVE-2020-6865 is a medium-severity vulnerability in ZTE Oscp, classified under Information Disclosure. CVSS score: 6.5/10. Published 2020-04-30.
How severe is CVE-2020-6865?: Medium severity. CVSS v3 base score is 6.5 out of 10.