Vulnerability Details CVE-2019-15135
The handshake protocol in Object Management Group (OMG) DDS Security 1.1 sends cleartext information about all of the capabilities of a participant (including capabilities inapplicable to the current session), which makes it easier for attackers to discover potentially sensitive reachability information on a Data Distribution Service (DDS) network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.3%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2019-15135
-
cpe:2.3:a:omg:dds_security:1.1