CVE-2016-2406

Description

The permission control module in Huawei Document Security Management (aka DSM) before V100R002C05SPC670 allows remote authenticated users to obtain sensitive information from encrypted documents by leveraging incorrect control of permissions on the PrintScreen button.

Risk Information

Base Score

4.3

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.07

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2015-8303 ,CVE-2016-2406 are affected in document_security_management v100r002c03spc005	NCM
Vulnerabilities CVE-2016-2406 are affected in document_security_management v100r002c05spc661	NCM
CVE-2016-2406	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234