Vulnerability Details CVE-2015-6538
The login page in Epiphany Cardio Server 3.3, 4.0, and 4.1 mishandles authentication requests, which allows remote attackers to conduct LDAP injection attacks, and consequently bypass intended access restrictions, via a crafted URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2015-6538
-
cpe:2.3:a:ephiphanyheathdata:cardio_server:3.3
-
cpe:2.3:a:ephiphanyheathdata:cardio_server:4.0
-
cpe:2.3:a:ephiphanyheathdata:cardio_server:4.1