CVE-2015-3284 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	2.1 UNKNOWN	LOCAL	LOW		AV:L/AC:L/Au:N/C:P/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 19%

Affected Products (NVD)

Vendor	Product	Version
openafs	openafs	𝑥 ≤ 1.6.12

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

openafs

bookworm	1.8.9-1 fixed
bullseye	1.8.6-5 fixed
sid	1.8.12.1-1 fixed
squeeze	not-affected

Ubuntu Releases

Ubuntu Product

Codename

openafs

precise	Fixed 1.6.1-1+ubuntu0.6 released
trusty	Fixed 1.6.7-1ubuntu1.1 released
vivid	ignored
wily	not-affected

Common Weakness Enumeration

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References

http://www.debian.org/security/2015/dsa-3320

http://www.openafs.org/pages/security/OPENAFS-SA-2015-003.txt

http://www.securitytracker.com/id/1033262

https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html

https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13

http://www.debian.org/security/2015/dsa-3320

http://www.openafs.org/pages/security/OPENAFS-SA-2015-003.txt

http://www.securitytracker.com/id/1033262

https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html

https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13