CVE-2016-15028

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-15028
A vulnerability was found in ICEPAY REST-API-NET 0.9. It has been declared as problematic. Affected by this vulnerability is the function RestClient of the file Classes/RestClient.cs of the component Checksum Validation. The manipulation leads to improper validation of integrity check value. The attack can be launched remotely. Upgrading to version 1.0 is able to address this issue. The name of the patch is 61f6b8758e5c971abff5f901cfa9f231052b775f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222847.

4.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

4.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:H/Au:N/C:N/I:P/A:P

Exploitability : 4.9 / Impact : 4.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://github.com/ICEPAY/REST-API-NET/commit/61f6b8758e5c971abff5f901cfa9f231052b775f Patch
https://github.com/ICEPAY/REST-API-NET/releases/tag/1.0 Release Notes
https://vuldb.com/?ctiid.222847 Permissions Required Third Party Advisory
https://vuldb.com/?id.222847 Third Party Advisory
https://github.com/ICEPAY/REST-API-NET/commit/61f6b8758e5c971abff5f901cfa9f231052b775f Patch
https://github.com/ICEPAY/REST-API-NET/releases/tag/1.0 Release Notes
https://vuldb.com/?ctiid.222847 Permissions Required Third Party Advisory
https://vuldb.com/?id.222847 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:icepay:rest_api:0.9:*:*:*:*:.net:*:*
History

21 Nov 2024, 02:45

Type Values Removed Values Added
CVSS v2 : 4.0
v3 : 5.9 		v2 : 4.0
v3 : 4.8
References () https://github.com/ICEPAY/REST-API-NET/commit/61f6b8758e5c971abff5f901cfa9f231052b775f - Patch () https://github.com/ICEPAY/REST-API-NET/commit/61f6b8758e5c971abff5f901cfa9f231052b775f - Patch
References () https://github.com/ICEPAY/REST-API-NET/releases/tag/1.0 - Release Notes () https://github.com/ICEPAY/REST-API-NET/releases/tag/1.0 - Release Notes
References () https://vuldb.com/?ctiid.222847 - Permissions Required, Third Party Advisory () https://vuldb.com/?ctiid.222847 - Permissions Required, Third Party Advisory
References () https://vuldb.com/?id.222847 - Third Party Advisory () https://vuldb.com/?id.222847 - Third Party Advisory

17 Mar 2023, 15:31

Type Values Removed Values Added
CPE cpe:2.3:a:icepay:rest_api:0.9:*:*:*:*:.net:*:*
References (MISC) https://vuldb.com/?ctiid.222847 - (MISC) https://vuldb.com/?ctiid.222847 - Permissions Required, Third Party Advisory
References (MISC) https://github.com/ICEPAY/REST-API-NET/commit/61f6b8758e5c971abff5f901cfa9f231052b775f - (MISC) https://github.com/ICEPAY/REST-API-NET/commit/61f6b8758e5c971abff5f901cfa9f231052b775f - Patch
References (MISC) https://vuldb.com/?id.222847 - (MISC) https://vuldb.com/?id.222847 - Third Party Advisory
References (MISC) https://github.com/ICEPAY/REST-API-NET/releases/tag/1.0 - (MISC) https://github.com/ICEPAY/REST-API-NET/releases/tag/1.0 - Release Notes
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.9

12 Mar 2023, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-03-12 15:15

Updated : 2024-11-21 02:45

NVD link : CVE-2016-15028

Mitre link : CVE-2016-15028

CVE.ORG link : CVE-2016-15028

JSON object : View

Products Affected

icepay

  • rest_api
CWE
CWE-354

Improper Validation of Integrity Check Value