NVD

Id
64975  
Name
CVE-2006-6430  
Description
Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-12-10  
Modified Date
2011-03-07  
Seq
2006-6430  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
339217 64975 CVE-2006-6430 21365  View
339218 64975 CVE-2006-6430 ADV-2006-4791  View
339219 64975 CVE-2006-6430 http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf  View
339220 64975 CVE-2006-6430 xerox-https-security-bypass(30679)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61312 JVNDB-2006-003578 Xerox WorkCentre および WorkCentre Pro の Web services における重要な情報を取得される脆弱性 Xerox WorkCentre および WorkCentre Pro の Web services は、HTTPS を必要としないため、重要な情報を取得される脆弱性が存在します。 CVE-2006-6430 22532 CVE-2006-6430 64975 7.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003578.html 2006-12-10 2012-12-20 View