2 lines
2.7 KiB
JSON
2 lines
2.7 KiB
JSON
{"affected":[{"affectedData":[{"product":"ZXCDN IAMWEB","vendor":"ZTE","versions":[{"status":"affected","version":"AllZXCDN-IAMWEBV6.01.03.01"}]}],"source":"psirt@zte.com.cn"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zte:zxcdn_iamweb_firmware:6.01.03.01:*:*:*:*:*:*:*","matchCriteriaId":"027ABFAD-32FB-4378-9AE5-256965A298CC","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zte:zxcdn_iamweb:-:*:*:*:*:*:*:*","matchCriteriaId":"64BC2B9C-27F5-4A8B-9C5F-5F4413B7ADE6","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the management portal in HTTP, resulting in users’ information leakage."},{"lang":"es","value":"La versión V6.01.03.01 del producto ZTE ZXCDN IAMWEB se ve afectada por una vulnerabilidad de error de configuración. Un atacante podría acceder directamente al portal de administración en HTTP, lo que provocaría una fuga de información de los usuarios."}],"id":"CVE-2019-3428","lastModified":"2026-06-17T02:35:08.763","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":4.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":8.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-11-22T16:15:12.227","references":[{"source":"psirt@zte.com.cn","tags":["Vendor Advisory"],"url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011863"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011863"}],"sourceIdentifier":"psirt@zte.com.cn","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|