CVE-2016-4980

low-risk

Published 2019-11-27

A password generation weakness exists in xquest through 2016-06-13.

Do I need to act?

0.13% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 2.5/10 Low

LOCAL / HIGH complexity

Xquest

Fedora

Enterprise Linux

Redhat Fedoraproject Ethz

Third Party Advisory https://access.redhat.com/security/cve/cve-2016-4980

https://bugzilla.redhat.com/show_bug.cgi?id=1346016

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-4980

Third Party Advisory https://access.redhat.com/security/cve/cve-2016-4980

https://bugzilla.redhat.com/show_bug.cgi?id=1346016

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-4980

/ 100

low-risk

Severity 6/34 · Minimal

Exploitability 1/34 · Minimal

Exposure 10/34 · Low