CVE-2016-2406

MEDIUM

Huawei Document Security Management <V100R002C05SPC670 - Info Discl...

Title source: llm

Description

The permission control module in Huawei Document Security Management (aka DSM) before V100R002C05SPC670 allows remote authenticated users to obtain sensitive information from encrypted documents by leveraging incorrect control of permissions on the PrintScreen button.

References (1)

[Vendor Advisory] http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160218-01-dsm-en

Scores

CVSS v3 4.3

EPSS 0.0007

EPSS Percentile 21.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Classification

CWE

CWE-275

Status published

Affected Products (2)

huawei/document_security_management < v100r002c05spc661

n/a/n/a

Timeline

Published Mar 20, 2017

Tracked Since Feb 18, 2026