Basware Banking (Maksuliikenne) before 8.90.07.X relies on the client to enforce (1) login verification, (2) audit trail creation, and (3) account locking, which allows remote attackers to "disrupt security-critical functions" by "dropping network traffic." NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 and ADT3 due to different vulnerability type and different affected versions.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2015-08-31T14:08:00
Updated: 2015-08-31T12:57:04
Reserved: 2015-08-28T00:00:00
Link: CVE-2015-6744
JSON object: View
NVD Information
Status : Analyzed
Published: 2015-08-31T14:59:03.807
Modified: 2015-08-31T19:07:48.830
Link: CVE-2015-6744
JSON object: View
Redhat Information
No data.
CWE