CVE-2016-5786 Information disclosure in OmniMetrix OmniView 1.2
Attackers can sniff HTTP traffic to steal OmniView credentials, leading to account compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-5786?
CVE-2016-5786 is a high-severity vulnerability in OmniMetrix OmniView 1.2, published on 13 Feb 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials.
Weakness: CWE-200
Which versions are affected by CVE-2016-5786?
It affects 1 product.
Products include Omnimetrix Omniview.
How do I fix CVE-2016-5786?
No fix has been published for CVE-2016-5786 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-5786 being exploited?
There is no known exploitation of CVE-2016-5786 in the wild and no public exploit code.
Other vulnerabilities in OmniMetrix OmniView 1.2
Sources
Also known as GHSA-8fx2-2j9c-7g3v.