2 lines
2.5 KiB
JSON
2 lines
2.5 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Navigator NCS","vendor":"Ciena","versions":[{"status":"affected","version":"7.2 and any older release"},{"status":"affected","version":"7.2-P01 through 7.2-P07"},{"status":"affected","version":"8.0"},{"status":"affected","version":"8.0-P01 through 8.0-P06A"},{"status":"affected","version":"8.1"},{"status":"affected","version":"8.1-P01 through 8.1-P06"},{"status":"affected","version":"8.2"},{"status":"affected","version":"8.2-P01 through 8.2-P06"},{"status":"affected","version":"9.0"},{"status":"affected","version":"9.0-P01 through 9.0-P05A"},{"status":"affected","version":"9.1"},{"status":"affected","version":"9.1-P01 through 9.1-P05"},{"status":"affected","version":"9.2"},{"status":"affected","version":"9.2-P01 through 9.2-P02"},{"status":"affected","version":"10.0"},{"status":"affected","version":"10.0-P01 through 10.0-P01B"}]}],"source":"7bd90cf1-1651-495e-9ae8-9415fb3c9feb"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Ciena Navigator Network\nControl Suite (NCS) contains an information exposure vulnerability in an\nevent-streaming API that does not properly enforce authentication. An\nunauthenticated attacker with network access to the affected service could\naccess the event stream and potentially obtain sensitive information."}],"id":"CVE-2026-5267","lastModified":"2026-09-28T16:31:16.073","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-5267","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-09-25T20:40:10.302755Z","version":"2.0.3"}}]},"published":"2026-09-25T20:17:11.613","references":[{"source":"7bd90cf1-1651-495e-9ae8-9415fb3c9feb","url":"https://www.ciena.com/product-security"}],"sourceIdentifier":"7bd90cf1-1651-495e-9ae8-9415fb3c9feb","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"7bd90cf1-1651-495e-9ae8-9415fb3c9feb","type":"Secondary"}]}
|