cvelist/2016/5xxx/CVE-2016-5786.json

{
   "CVE_data_meta" : {
      "ASSIGNER" : "ics-cert@hq.dhs.gov",
      "ID" : "CVE-2016-5786",
      "STATE" : "PUBLIC"
   },
   "affects" : {
      "vendor" : {
         "vendor_data" : [
            {
               "product" : {
                  "product_data" : [
                     {
                        "product_name" : "OmniMetrix OmniView 1.2",
                        "version" : {
                           "version_data" : [
                              {
                                 "version_value" : "OmniMetrix OmniView 1.2"
                              }
                           ]
                        }
                     }
                  ]
               },
               "vendor_name" : "n/a"
            }
         ]
      }
   },
   "data_format" : "MITRE",
   "data_type" : "CVE",
   "data_version" : "4.0",
   "description" : {
      "description_data" : [
         {
            "lang" : "eng",
            "value" : "An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials."
         }
      ]
   },
   "problemtype" : {
      "problemtype_data" : [
         {
            "description" : [
               {
                  "lang" : "eng",
                  "value" : "OmniMetrix OmniView unencrypted http"
               }
            ]
         }
      ]
   },
   "references" : {
      "reference_data" : [
         {
            "name" : "https://ics-cert.us-cert.gov/advisories/ICSA-16-350-02",
            "refsource" : "MISC",
            "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-16-350-02"
         },
         {
            "name" : "94937",
            "refsource" : "BID",
            "url" : "http://www.securityfocus.com/bid/94937"
         }
      ]
   }
}