[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGhs_I-kixCy1fFcsoMAHXwFFnR-AEACZNIXzjegq6UQ":3,"g5a-risk:CVE-2016-4407":121},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":72,"weaknesses":73,"weaknessesCount":49,"isActivelyExploited":82,"cisaInfo":15,"otxData":15,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":117,"notableEvents":118},"CVE-2016-4407","What is CVE-2016-4407?","The DSA algorithm implementation in SAP SAPCRYPTOLIB 5.555.38 does not properly check signatures, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors, aka SAP Security Note 2223008.","The DSA algorithm implementation in SAP SAPCRYPTOLIB 5.555.38 does not properly check signatures, which allows remote authenticated users to impersonate arbi...","2016-10-13T14:59:06.19","2025-04-12T10:46:40.837",6.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",2.8,3.6,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":27,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":35,"ConfidentialityImpact":24,"IntegrityImpact":36,"AvailabilityImpact":24,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:P\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.00956,[40,40,40,40,40,40,40],"Medium",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"sap","sapcryptolib","5.555.38","cpe:2.3:a:sap:sapcryptolib:5.555.38:*:*:*:*:*:*:*",1,[51,57,61,66,68,70],{"url":52,"source":53,"tags":54},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2016\u002FOct\u002F32","Seclists",[55,56],"Mailing List","Third Party Advisory",{"url":58,"source":59,"tags":60},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F93502","Securityfocus",[],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fwww.onapsis.com\u002Fresearch\u002Fsecurity-advisories\u002Fsap-missing-signature-check-dsa-algorithm","Onapsis",[65],"Permissions Required",{"url":52,"source":53,"tags":67},[55,56],{"url":58,"source":59,"tags":69},[],{"url":62,"source":63,"tags":71},[65],6,[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2016-4407? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-4407, a medium severity cyber security vulnerability from 2016. The DSA algorithm implementation in SAP SAPCRYPTOLIB 5.555...","CVE-2016-4407, CVE-2016-4407 vulnerability, CVE-2016-4407 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, sap security, sapcryptolib vulnerability","\u002Fwhat-is\u002Fcve-2016-4407",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-4407","Cybersecurity","CVE-2016-4407, CVE-2016-4407 vulnerability, CVE-2016-4407 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":15,"Negate":15,"Nodes":111},[112],{"Operator":113,"Negate":15,"CPEMatch":114},"OR",[115],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":116,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"61194C87-D116-4822-A83E-FB3B5930A497",[],[],{"lastModified":11,"cacheTime":120,"version":33},1792382250994,{"score":122,"band":123,"action":124,"scoredAt":125},25,"Low","Monitor","2026-10-16T06:40:20.141893+00:00"]