NVD

Id
27256  
Name
CVE-2015-6316  
Description
The default configuration of sshd_config in Cisco Mobility Services Engine (MSE) through 8.0.120.7 allows logins by the oracle account, which makes it easier for remote attackers to obtain access by entering this account"s hardcoded password in an SSH session, aka Bug ID CSCuv40501.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-11-06  
Modified Date
2017-01-06  
Seq
2015-6316  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
143727 27256 CVE-2015-6316 20151104 Cisco Mobility Services Engine Static Credential Vulnerability  View
143728 27256 CVE-2015-6316 77432  View
143729 27256 CVE-2015-6316 1034065  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10449 JVNDB-2015-005769 Cisco Mobility Services Engine の sshd_config のデフォルト設定におけるアクセス権を取得される脆弱性 Cisco Mobility Services Engine (MSE) の sshd_config のデフォルト設定は、オラクルアカウントでのログインを許可するため、アクセス権を取得される脆弱性が存在します。 CVE-2015-6316 83541 CVE-2015-6316 27256 6.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005769.html 2015-11-04 2015-11-09 View