[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjYMIPIzQPpHZLRCv5J39dahyGLlcfmc4AAtpEvbxC3E":3,"g5a-risk:CVE-2016-2107":612},{"success":4,"data":5,"meta":610},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":26,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":218,"references":219,"referencesCount":398,"weaknesses":399,"weaknessesCount":408,"isActivelyExploited":41,"cisaInfo":26,"otxData":26,"relatedBlogPosts":409,"seoMetadata":410,"configurations":435,"relatedVendorCves":608,"notableEvents":609},"CVE-2016-2107","What is CVE-2016-2107?","The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.","The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows r...","2016-05-05T01:59:03.2","2026-06-17T00:43:27.037",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":42},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,[],[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":38,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":41,"ObtainAllPrivilege":41,"ObtainUserPrivilege":41,"ObtainOtherPrivilege":41,"UserInteractionRequired":41},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":37,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:H\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",2.6,"","LOW",4.9,2.9,false,[],0.89058,[43,43,43,43,43,43,43],"Medium",[47,52,55,59,62,65,68,71,76,79,83,86,89,92,95,98,101,104,107,112,115,118,121,124,127,130,133,136,139,142,145,148,151,154,157,160,163,166,169,174,177,180,183,186,188,190,192,196,199,204,209,212,215],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"redhat","enterprise_linux_desktop","7.0","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",{"vendor":48,"product":53,"version":50,"criteria":54,"vulnerable":4},"enterprise_linux_hpc_node","cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*",{"vendor":48,"product":56,"version":57,"criteria":58,"vulnerable":4},"enterprise_linux_hpc_node_eus","7.2","cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*",{"vendor":48,"product":60,"version":50,"criteria":61,"vulnerable":4},"enterprise_linux_server","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",{"vendor":48,"product":63,"version":57,"criteria":64,"vulnerable":4},"enterprise_linux_server_aus","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",{"vendor":48,"product":66,"version":57,"criteria":67,"vulnerable":4},"enterprise_linux_server_eus","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*",{"vendor":48,"product":69,"version":50,"criteria":70,"vulnerable":4},"enterprise_linux_workstation","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",{"vendor":72,"product":73,"version":74,"criteria":75,"vulnerable":4},"opensuse","leap","42.1","cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",{"vendor":72,"product":72,"version":77,"criteria":78,"vulnerable":4},"13.2","cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",{"vendor":80,"product":80,"version":81,"criteria":82,"vulnerable":4},"openssl","*","cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",{"vendor":80,"product":80,"version":84,"criteria":85,"vulnerable":4},"1.0.2","cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*",{"vendor":80,"product":80,"version":87,"criteria":88,"vulnerable":4},"1.0.2a","cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*",{"vendor":80,"product":80,"version":90,"criteria":91,"vulnerable":4},"1.0.2b","cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",{"vendor":80,"product":80,"version":93,"criteria":94,"vulnerable":4},"1.0.2c","cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",{"vendor":80,"product":80,"version":96,"criteria":97,"vulnerable":4},"1.0.2d","cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",{"vendor":80,"product":80,"version":99,"criteria":100,"vulnerable":4},"1.0.2e","cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",{"vendor":80,"product":80,"version":102,"criteria":103,"vulnerable":4},"1.0.2f","cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*",{"vendor":80,"product":80,"version":105,"criteria":106,"vulnerable":4},"1.0.2g","cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":110,"criteria":111,"vulnerable":4},"google","android","4.0","cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":113,"criteria":114,"vulnerable":4},"4.0.1","cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":116,"criteria":117,"vulnerable":4},"4.0.2","cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":119,"criteria":120,"vulnerable":4},"4.0.3","cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":122,"criteria":123,"vulnerable":4},"4.0.4","cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":125,"criteria":126,"vulnerable":4},"4.1","cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":128,"criteria":129,"vulnerable":4},"4.1.2","cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":131,"criteria":132,"vulnerable":4},"4.2","cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":134,"criteria":135,"vulnerable":4},"4.2.1","cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":137,"criteria":138,"vulnerable":4},"4.2.2","cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":140,"criteria":141,"vulnerable":4},"4.3","cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":143,"criteria":144,"vulnerable":4},"4.3.1","cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":146,"criteria":147,"vulnerable":4},"4.4","cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":149,"criteria":150,"vulnerable":4},"4.4.1","cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":152,"criteria":153,"vulnerable":4},"4.4.2","cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":155,"criteria":156,"vulnerable":4},"4.4.3","cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":158,"criteria":159,"vulnerable":4},"5.0","cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":161,"criteria":162,"vulnerable":4},"5.0.1","cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":164,"criteria":165,"vulnerable":4},"5.1","cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",{"vendor":108,"product":109,"version":167,"criteria":168,"vulnerable":4},"5.1.0","cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",{"vendor":170,"product":171,"version":172,"criteria":173,"vulnerable":4},"hp","helion_openstack","2.0.0","cpe:2.3:a:hp:helion_openstack:2.0.0:*:*:*:*:*:*:*",{"vendor":170,"product":171,"version":175,"criteria":176,"vulnerable":4},"2.1.0","cpe:2.3:a:hp:helion_openstack:2.1.0:*:*:*:*:*:*:*",{"vendor":170,"product":171,"version":178,"criteria":179,"vulnerable":4},"2.1.2","cpe:2.3:a:hp:helion_openstack:2.1.2:*:*:*:*:*:*:*",{"vendor":170,"product":171,"version":181,"criteria":182,"vulnerable":4},"2.1.4","cpe:2.3:a:hp:helion_openstack:2.1.4:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":184,"criteria":185,"vulnerable":4},"6.0","cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",{"vendor":48,"product":53,"version":184,"criteria":187,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*",{"vendor":48,"product":60,"version":184,"criteria":189,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",{"vendor":48,"product":69,"version":184,"criteria":191,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",{"vendor":193,"product":194,"version":81,"criteria":195,"vulnerable":4},"nodejs","node.js","cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*",{"vendor":193,"product":194,"version":197,"criteria":198,"vulnerable":4},"6.0.0","cpe:2.3:a:nodejs:node.js:6.0.0:*:*:*:*:*:*:*",{"vendor":200,"product":201,"version":202,"criteria":203,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":205,"product":206,"version":207,"criteria":208,"vulnerable":4},"canonical","ubuntu_linux","12.04","cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",{"vendor":205,"product":206,"version":210,"criteria":211,"vulnerable":4},"14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",{"vendor":205,"product":206,"version":213,"criteria":214,"vulnerable":4},"15.10","cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",{"vendor":205,"product":206,"version":216,"criteria":217,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",53,[220,225,230,234,237,240,244,247,250,253,256,259,262,265,270,274,277,280,283,287,291,295,299,303,308,311,314,317,320,323,326,329,332,336,339,343,347,351,355,360,364,369,373,376,379,382,385,388,391,394],{"url":221,"source":222,"tags":223},"http:\u002F\u002Fkb.juniper.net\u002FInfoCenter\u002Findex?page=content&id=JSA10759","Juniper",[224],"Third Party Advisory",{"url":226,"source":227,"tags":228},"http:\u002F\u002Flists.apple.com\u002Farchives\u002Fsecurity-announce\u002F2016\u002FJul\u002Fmsg00000.html","Apple",[229,224],"Mailing List",{"url":231,"source":232,"tags":233},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-May\u002F183457.html","Fedoraproject",[229,224],{"url":235,"source":232,"tags":236},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-May\u002F183607.html",[229,224],{"url":238,"source":232,"tags":239},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-May\u002F184605.html",[229,224],{"url":241,"source":242,"tags":243},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-05\u002Fmsg00001.html","Opensuse",[229,224],{"url":245,"source":242,"tags":246},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-05\u002Fmsg00008.html",[229,224],{"url":248,"source":242,"tags":249},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-05\u002Fmsg00011.html",[229,224],{"url":251,"source":242,"tags":252},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-05\u002Fmsg00013.html",[229,224],{"url":254,"source":242,"tags":255},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-05\u002Fmsg00014.html",[229,224],{"url":257,"source":242,"tags":258},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-05\u002Fmsg00016.html",[229,224],{"url":260,"source":242,"tags":261},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-05\u002Fmsg00019.html",[224],{"url":263,"source":242,"tags":264},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-06\u002Fmsg00019.html",[229,224],{"url":266,"source":267,"tags":268},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F136912\u002FSlackware-Security-Advisory-openssl-Updates.html","Packetstormsecurity",[224,269],"VDB Entry",{"url":271,"source":272,"tags":273},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-0722.html","Red Hat",[224],{"url":275,"source":272,"tags":276},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-0996.html",[224],{"url":278,"source":272,"tags":279},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-2073.html",[224],{"url":281,"source":272,"tags":282},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-2957.html",[224],{"url":284,"source":285,"tags":286},"http:\u002F\u002Fsource.android.com\u002Fsecurity\u002Fbulletin\u002F2016-07-01.html","Android",[224],{"url":288,"source":289,"tags":290},"http:\u002F\u002Fsupport.citrix.com\u002Farticle\u002FCTX212736","Citrix",[224],{"url":292,"source":293,"tags":294},"http:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-20160504-openssl","Cisco",[224],{"url":296,"source":297,"tags":298},"http:\u002F\u002Fweb-in-security.blogspot.ca\u002F2016\u002F05\u002Fcurious-padding-oracle-in-openssl-cve.html","Blogspot",[224],{"url":300,"source":301,"tags":302},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3566","Debian",[224],{"url":304,"source":305,"tags":306},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujan2018-3236628.html","Oracle",[307,224],"Patch",{"url":309,"source":305,"tags":310},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujul2016-2881720.html",[307,224],{"url":312,"source":305,"tags":313},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujul2017-3236622.html",[307,224],{"url":315,"source":305,"tags":316},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujul2018-4258247.html",[307,224],{"url":318,"source":305,"tags":319},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpuoct2016-2881722.html",[307,224],{"url":321,"source":305,"tags":322},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpuoct2017-3236626.html",[307,224],{"url":324,"source":305,"tags":325},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpuoct2018-4428296.html",[307,224],{"url":327,"source":305,"tags":328},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fbulletinapr2016-2952098.html",[224],{"url":330,"source":305,"tags":331},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Flinuxbulletinapr2016-2952096.html",[224],{"url":333,"source":334,"tags":335},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F89760","Securityfocus",[224,269],{"url":337,"source":334,"tags":338},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F91787",[224,269],{"url":340,"source":341,"tags":342},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1035721","Securitytracker",[224,269],{"url":344,"source":345,"tags":346},"http:\u002F\u002Fwww.slackware.com\u002Fsecurity\u002Fviewer.php?l=slackware-security&y=2016&m=slackware-security.542103","Slackware",[229,224],{"url":348,"source":349,"tags":350},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2959-1","Ubuntu",[224],{"url":352,"source":353,"tags":354},"https:\u002F\u002Fblog.cloudflare.com\u002Fyet-another-padding-oracle-in-openssl-cbc-ciphersuites\u002F","Cloudflare",[224],{"url":356,"source":357,"tags":358},"https:\u002F\u002Fbto.bluecoat.com\u002Fsecurity-advisory\u002Fsa123","Bluecoat",[359],"Permissions Required",{"url":361,"source":362,"tags":363},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-412672.pdf","Siemens",[224],{"url":365,"source":366,"tags":367},"https:\u002F\u002Fgit.openssl.org\u002F?p=openssl.git%3Ba=commit%3Bh=68595c0c2886e7942a14f98c17a55a88afb6c292","Openssl",[368],"Broken Link",{"url":370,"source":371,"tags":372},"https:\u002F\u002Fh20566.www2.hpe.com\u002Fhpsc\u002Fdoc\u002Fpublic\u002Fdisplay?docLocale=en_US&docId=emr_na-hpesbgn03726en_us","Hpe",[224],{"url":374,"source":371,"tags":375},"https:\u002F\u002Fh20566.www2.hpe.com\u002Fhpsc\u002Fdoc\u002Fpublic\u002Fdisplay?docLocale=en_US&docId=emr_na-hpesbgn03728en_us",[224],{"url":377,"source":371,"tags":378},"https:\u002F\u002Fh20566.www2.hpe.com\u002Fhpsc\u002Fdoc\u002Fpublic\u002Fdisplay?docLocale=en_US&docId=emr_na-hpesbhf03756en_us",[224],{"url":380,"source":371,"tags":381},"https:\u002F\u002Fh20566.www2.hpe.com\u002Fhpsc\u002Fdoc\u002Fpublic\u002Fdisplay?docLocale=en_US&docId=emr_na-hpesbhf03765en_us",[224],{"url":383,"source":371,"tags":384},"https:\u002F\u002Fh20566.www2.hpe.com\u002Fportal\u002Fsite\u002Fhpsc\u002Fpublic\u002Fkb\u002FdocDisplay?docId=emr_na-c05164862",[224],{"url":386,"source":371,"tags":387},"https:\u002F\u002Fh20566.www2.hpe.com\u002Fportal\u002Fsite\u002Fhpsc\u002Fpublic\u002Fkb\u002FdocDisplay?docId=emr_na-c05320149",[224],{"url":389,"source":371,"tags":390},"https:\u002F\u002Fh20566.www2.hpe.com\u002Fportal\u002Fsite\u002Fhpsc\u002Fpublic\u002Fkb\u002FdocDisplay?docId=emr_na-c05386804",[224],{"url":392,"source":371,"tags":393},"https:\u002F\u002Fh20566.www2.hpe.com\u002Fportal\u002Fsite\u002Fhpsc\u002Fpublic\u002Fkb\u002FdocDisplay?docId=emr_na-c05390722",[224],{"url":395,"source":396,"tags":397},"https:\u002F\u002Fkb.pulsesecure.net\u002Farticles\u002FPulse_Security_Advisories\u002FSA40202","Pulsesecure",[224],50,[400],{"id":401,"name":402,"description":403,"extendedDescription":404,"status":405,"abstraction":406,"structure":407},"CWE-200","Exposure of Sensitive Information to an Unauthorized Actor","The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","There are many different kinds of mistakes that introduce information exposures. The severity of the error can range widely, depending on the context in which the product operates, the type of sensitive information that is revealed, and the benefits it may provide to an attacker.  Some kinds of sensitive information include:\nInformation might be sensitive to different parties, each of which may have their own expectations for whether the information should be protected.  These parties include:\nInformation exposures can occur in different ways:\nIt is common practice to describe any loss of confidentiality as an \"information exposure,\" but this can lead to overuse of CWE-200 in CWE mapping. From the CWE perspective, loss of confidentiality is a technical impact that can arise from dozens of different weaknesses, such as insecure file permissions or out-of-bounds read.  CWE-200 and its lower-level descendants are intended to cover the mistakes that occur in behaviors that explicitly manage, store, transfer, or cleanse sensitive information.","Draft","Class","Simple",1,[],{"title":411,"metaDescription":412,"keywords":413,"canonicalUrl":414,"structuredData":415},"What is CVE-2016-2107? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2016-2107, a medium severity cyber security vulnerability from 2016. High exploit probability (89.1%). The AES-NI implementatio...","CVE-2016-2107, CVE-2016-2107 vulnerability, CVE-2016-2107 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, redhat security, opensuse security, openssl security, enterprise_linux_desktop vulnerability, enterprise_linux_hpc_node vulnerability, enterprise_linux_hpc_node_eus vulnerability, enterprise_linux_server vulnerability, enterprise_linux_server_aus vulnerability","\u002Fwhat-is\u002Fcve-2016-2107",{"@context":416,"@type":417,"headline":411,"description":412,"datePublished":10,"dateModified":11,"author":418,"publisher":422,"about":426,"mainEntityOfPage":430,"articleSection":433,"keywords":434},"https:\u002F\u002Fschema.org","TechArticle",{"@type":419,"name":420,"url":421},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":419,"name":420,"url":421,"logo":423},{"@type":424,"url":425},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":427,"name":6,"description":428,"additionalType":429},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":431,"@id":432},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2016-2107","Cybersecurity","CVE-2016-2107, CVE-2016-2107 vulnerability, CVE-2016-2107 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[436,455,463,495,539,551,563,590,596],{"Operator":26,"Negate":26,"Nodes":437},[438],{"Operator":439,"Negate":41,"CPEMatch":440},"OR",[441,443,445,447,449,451,453],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":442,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"33C068A4-3780-4EAB-A937-6082DF847564",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":444,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3C84489B-B08C-4854-8A12-D01B6E45CF79",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":446,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"39A901D6-0874-46A4-92A8-5F72C7A89E85",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":448,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"51EF4996-72F4-4FA4-814F-F5991E7A8318",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":450,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1C8D871B-AEA1-4407-AEE3-47EC782250FF",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":452,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"44B067C7-735E-43C9-9188-7E1522A02491",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":454,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"825ECE2D-E232-46E0-A047-074B34DB1E97",{"Operator":26,"Negate":26,"Nodes":456},[457],{"Operator":439,"Negate":41,"CPEMatch":458},[459,461],{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":460,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4863BE36-D16A-4D75-90D9-FD76DB5B48B7",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":462,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"03117DF1-3BEC-4B8D-AD63-DBBDB2126081",{"Operator":26,"Negate":26,"Nodes":464},[465],{"Operator":439,"Negate":41,"CPEMatch":466},[467,470,472,475,478,481,483,485,487,489,491,493],{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":468,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":469},"C1F608A0-78BE-4F17-9E41-70933E52B3C7","1.0.1s",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":471,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B",{"Vulnerable":4,"Criteria":473,"MatchCriteriaID":474,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","18797BEE-417D-4959-9AAD-C5A7C051B524",{"Vulnerable":4,"Criteria":476,"MatchCriteriaID":477,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","6FAA3C31-BD9D-45A9-A502-837FECA6D479",{"Vulnerable":4,"Criteria":479,"MatchCriteriaID":480,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","6455A421-9956-4846-AC7C-3431E0D37D23",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":482,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"60F946FD-F564-49DA-B043-5943308BA9EE",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":484,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":486,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9B89180B-FB68-4DD8-B076-16E51CC7FB91",{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":488,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4C986592-4086-4A39-9767-EF34DBAA6A53",{"Vulnerable":4,"Criteria":100,"MatchCriteriaID":490,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7B23181C-03DB-4E92-B3F6-6B585B5231B4",{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":492,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"94D9EC1C-4843-4026-9B05-E060E9391734",{"Vulnerable":4,"Criteria":106,"MatchCriteriaID":494,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F",{"Operator":26,"Negate":26,"Nodes":496},[497],{"Operator":439,"Negate":41,"CPEMatch":498},[499,501,503,505,507,509,511,513,515,517,519,521,523,525,527,529,531,533,535,537],{"Vulnerable":4,"Criteria":111,"MatchCriteriaID":500,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A39C31E3-75C0-4E92-A6B5-7D67B22E3449",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":502,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BB318EA4-2908-4B91-8DBB-20008FDF528A",{"Vulnerable":4,"Criteria":117,"MatchCriteriaID":504,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1F4E46A9-B652-47CE-92E8-01021E57724B",{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":506,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93",{"Vulnerable":4,"Criteria":123,"MatchCriteriaID":508,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"36DD8E3F-6308-4680-B932-4CBD8E58A7FB",{"Vulnerable":4,"Criteria":126,"MatchCriteriaID":510,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1DA9F0F7-D592-481E-884C-B1A94E702825",{"Vulnerable":4,"Criteria":129,"MatchCriteriaID":512,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B",{"Vulnerable":4,"Criteria":132,"MatchCriteriaID":514,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1",{"Vulnerable":4,"Criteria":135,"MatchCriteriaID":516,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A47AB858-36DE-4330-8CAC-1B46C5C8DA80",{"Vulnerable":4,"Criteria":138,"MatchCriteriaID":518,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"49413FF7-7910-4F74-B106-C3170612CB2A",{"Vulnerable":4,"Criteria":141,"MatchCriteriaID":520,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B",{"Vulnerable":4,"Criteria":144,"MatchCriteriaID":522,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A8882E50-7C49-4A99-91F2-DF979CF8BB2F",{"Vulnerable":4,"Criteria":147,"MatchCriteriaID":524,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"98C32982-095C-4628-9958-118A3D3A9CAA",{"Vulnerable":4,"Criteria":150,"MatchCriteriaID":526,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1",{"Vulnerable":4,"Criteria":153,"MatchCriteriaID":528,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D",{"Vulnerable":4,"Criteria":156,"MatchCriteriaID":530,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42",{"Vulnerable":4,"Criteria":159,"MatchCriteriaID":532,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7C4E6353-B77A-464F-B7DE-932704003B33",{"Vulnerable":4,"Criteria":162,"MatchCriteriaID":534,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"77125688-2CCA-4990-ABB2-551D47CB0CDD",{"Vulnerable":4,"Criteria":165,"MatchCriteriaID":536,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3",{"Vulnerable":4,"Criteria":168,"MatchCriteriaID":538,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B846C63A-7261-481E-B4A4-0D8C79E0D8A7",{"Operator":26,"Negate":26,"Nodes":540},[541],{"Operator":439,"Negate":41,"CPEMatch":542},[543,545,547,549],{"Vulnerable":4,"Criteria":173,"MatchCriteriaID":544,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"46D566AF-D1DE-4EAD-B881-DC40D1DE780C",{"Vulnerable":4,"Criteria":176,"MatchCriteriaID":546,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"81BED703-422A-4937-8BF0-F83C248188F9",{"Vulnerable":4,"Criteria":179,"MatchCriteriaID":548,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A241BABC-E6A8-43B1-BED6-77FC38E337BD",{"Vulnerable":4,"Criteria":182,"MatchCriteriaID":550,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DBE8AEFE-C74B-4E24-8EBA-35207DE756E3",{"Operator":26,"Negate":26,"Nodes":552},[553],{"Operator":439,"Negate":41,"CPEMatch":554},[555,557,559,561],{"Vulnerable":4,"Criteria":185,"MatchCriteriaID":556,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",{"Vulnerable":4,"Criteria":187,"MatchCriteriaID":558,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF",{"Vulnerable":4,"Criteria":189,"MatchCriteriaID":560,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9BBCD86A-E6C7-4444-9D74-F861084090F0",{"Vulnerable":4,"Criteria":191,"MatchCriteriaID":562,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E5ED5807-55B7-47C5-97A6-03233F4FBC3A",{"Operator":26,"Negate":26,"Nodes":564},[565],{"Operator":439,"Negate":41,"CPEMatch":566},[567,571,575,579,584,588],{"Vulnerable":4,"Criteria":195,"MatchCriteriaID":568,"VersionStartExcluding":26,"VersionStartIncluding":569,"VersionEndExcluding":570,"VersionEndIncluding":26},"1CBD1B3E-644C-42B4-A556-7A4C58D219D6","0.10.0","0.10.45",{"Vulnerable":4,"Criteria":195,"MatchCriteriaID":572,"VersionStartExcluding":26,"VersionStartIncluding":573,"VersionEndExcluding":574,"VersionEndIncluding":26},"2E35B5D6-6D7B-4D04-A8E4-88C4C47270AE","0.12.0","0.12.14",{"Vulnerable":4,"Criteria":576,"MatchCriteriaID":577,"VersionStartExcluding":26,"VersionStartIncluding":578,"VersionEndExcluding":26,"VersionEndIncluding":128},"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","A47FC4F7-1F77-4314-B4B3-3C5D8E335379","4.0.0",{"Vulnerable":4,"Criteria":580,"MatchCriteriaID":581,"VersionStartExcluding":26,"VersionStartIncluding":582,"VersionEndExcluding":583,"VersionEndIncluding":26},"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","BA51558F-F55C-48B3-870B-6D1225998AB3","4.2.0","4.4.4",{"Vulnerable":4,"Criteria":576,"MatchCriteriaID":585,"VersionStartExcluding":26,"VersionStartIncluding":586,"VersionEndExcluding":587,"VersionEndIncluding":26},"D8D63E80-A861-4393-A868-9845F521CD04","5.0.0","5.11.1",{"Vulnerable":4,"Criteria":198,"MatchCriteriaID":589,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5A53CB0E-3FBA-4796-BC81-6003A7DC29DE",{"Operator":26,"Negate":26,"Nodes":591},[592],{"Operator":439,"Negate":41,"CPEMatch":593},[594],{"Vulnerable":4,"Criteria":203,"MatchCriteriaID":595,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Operator":26,"Negate":26,"Nodes":597},[598],{"Operator":439,"Negate":41,"CPEMatch":599},[600,602,604,606],{"Vulnerable":4,"Criteria":208,"MatchCriteriaID":601,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CB66DB75-2B16-4EBF-9B93-CE49D8086E41",{"Vulnerable":4,"Criteria":211,"MatchCriteriaID":603,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"815D70A8-47D3-459C-A32C-9FEACA0659D1",{"Vulnerable":4,"Criteria":214,"MatchCriteriaID":605,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E88A537F-F4D0-46B9-9E37-965233C2A355",{"Vulnerable":4,"Criteria":217,"MatchCriteriaID":607,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6",[],[],{"lastModified":11,"cacheTime":611,"version":33},1793195944485,{"score":613,"band":45,"action":614,"scoredAt":615},58,"Plan remediation","2026-07-01T10:19:48.960987+00:00"]