SecBoard
Zurück zur CVE-Übersicht

CVE-2016-10140

MEDIUM(5.0)

AV:N/AC:L/Au:N/C:P/I:N/A:N

Risk Signal Score23/100 — NIEDRIG
  • CVSS 5 — Mittel
  • EPSS 34%

EPSS-Score

34%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

5

Technische Schwere

Beschreibung

Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1.30 and v1.29, which allows a remote unauthenticated attacker to browse all directories in the web root, e.g., a remote unauthenticated attacker can view all CCTV images on the server via the /events URI.

Referenzen