CVE-2016-2406
Last modified
CVE-2016-2406 is a vulnerability of currently unknown severity. The permission control module in Huawei Document Security Management (aka DSM) before V100R002C05SPC670 allows remote authenticated users to obtain sensitive information from encrypted documents by leveraging incorrect control of permissions on the PrintScreen button.. EPSS estimates a 0.58% chance of exploitation in the next 30 days.
Description
The permission control module in Huawei Document Security Management (aka DSM) before V100R002C05SPC670 allows remote authenticated users to obtain sensitive information from encrypted documents by leveraging incorrect control of permissions on the PrintScreen button.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Document Security Management | <= v100r002c05spc661 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-2406?
How severe is CVE-2016-2406?
How do I fix CVE-2016-2406?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-2398Comcast XFINITY Home Security System does not properly maint…
- CVE-2016-2399Integer overflow in the quicktime_read_pascal function in li…
- CVE-2016-2402OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-m…5.9
- CVE-2016-2403Symfony before 2.8.6 and 3.x before 3.0.6 allows remote atta…
- CVE-2016-2404Huawei switches S5700, S6700, S7700, S9700 with software V20…
- CVE-2016-2405Huawei Policy Center with software before V100R003C10SPC020 …
- CVE-2016-2407Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2016-2408Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer…
- CVE-2016-2409A Texas Instruments (TI) haptic kernel driver in Android 6.x…
- CVE-2016-2410A Qualcomm video kernel driver in Android 6.x before 2016-04…
- CVE-2016-2411A Qualcomm Power Management kernel driver in Android 6.x bef…
- CVE-2016-2412include/core/SkPostConfig.h in Skia, as used in System_serve…
Are you affected by CVE-2016-2406?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST