Vulnerability 102206 - CERT Civis.Net

Vulnerability Name:

CCN-102206

Published:

2015-04-13

Updated:

2015-04-13

Summary:

Microsoft Windows could allow a remote authenticated attacker to obtain sensitive information, caused by the use of multiple HTTP requests for various features by multiple API functions. By intercepting the requests and redirecting the victim to a malicious SMB server, an attacker could exploit this vulnerability to obtain another user's credentials in an encrypted format.

Note: This vulnerability is also known as "Redirect to SMB".

CVSS v3 Severity:

4.8 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

CVSS v2 Severity:

6.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:N/A:N)
5.1 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:N/A:N/E:U/RL:W/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): None Availibility (A): None