CVE-2003-5002

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in ISS BlackICE PC Protection. It has been declared as problematic. Affected by this vulnerability is the component Update Handler which allows cleartext transmission of data. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://vuldb.com/?id.295

Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:iss_blackice_pc_protection:-:*:*:*:*:*:*:*

History

06 Apr 2022, 03:35

Type	Values Removed	Values Added
CPE		cpe:2.3:a:ibm:iss_blackice_pc_protection:-:::::::*
CWE		CWE-319
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : 5.0 v3 : 5.3
References	~~(MISC) https://vuldb.com/?id.295 -~~	(MISC) https://vuldb.com/?id.295 - Third Party Advisory

28 Mar 2022, 21:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2022-03-28 21:15

Updated : 2024-08-08 03:15

NVD link : CVE-2003-5002

Mitre link : CVE-2003-5002

CVE.ORG link : CVE-2003-5002

JSON object : View

Products Affected

ibm

iss_blackice_pc_protection

CWE

CWE-319

Cleartext Transmission of Sensitive Information

{"id": "CVE-2003-5002", "cveTags": [{"tags": ["unsupported-when-assigned"], "sourceIdentifier": "psirt@us.ibm.com"}], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.2}]}, "published": "2022-03-28T21:15:07.930", "references": [{"url": "https://vuldb.com/?id.295", "source": "psirt@us.ibm.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-319"}]}, {"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-319"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in ISS BlackICE PC Protection. It has been declared as problematic. Affected by this vulnerability is the component Update Handler which allows cleartext transmission of data. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"}, {"lang": "es", "value": "** NO SOPORTADO CUANDO DE ASIGN\u00d3 ** Se ha encontrado una vulnerabilidad en ISS BlackICE PC Protection. Se ha declarado como problem\u00e1tica. Esta vulnerabilidad afecta al componente Update Handler que permite la transmisi\u00f3n de datos en texto sin cifrar. NOTA: Esta vulnerabilidad s\u00f3lo afecta a productos que ya no son soportados por el mantenedor"}], "lastModified": "2024-08-08T03:15:34.507", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:iss_blackice_pc_protection:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2FE92ADF-24D4-4B3D-9C9B-2409DD21E3E8"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}