[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgku0Ft7F3SAO3BKvTeVpM2eM7M1TuJMRwNJV8XAGVow":3,"g5a-risk:CVE-2016-6225":206},{"success":4,"data":5,"meta":204},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":78,"references":79,"referencesCount":129,"weaknesses":130,"weaknessesCount":139,"isActivelyExploited":140,"cisaInfo":15,"otxData":15,"relatedBlogPosts":141,"seoMetadata":142,"configurations":167,"relatedVendorCves":202,"notableEvents":203},"CVE-2016-6225","What is CVE-2016-6225?","xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394.","xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier ...","2017-03-23T16:59:00.247","2025-04-20T01:37:25.86",5.9,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",2.2,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":26,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",4.3,8.6,2.9,0.01123,[38,38,38,38,38,38,38],"Medium",[42,47,50,53,56,59,62,67,70,75],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"percona","xtrabackup","*","cpe:2.3:a:percona:xtrabackup:*:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":48,"criteria":49,"vulnerable":4},"2.4.0","cpe:2.3:a:percona:xtrabackup:2.4.0:rc1:*:*:*:*:*:*",{"vendor":43,"product":44,"version":51,"criteria":52,"vulnerable":4},"2.4.1","cpe:2.3:a:percona:xtrabackup:2.4.1:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":54,"criteria":55,"vulnerable":4},"2.4.2","cpe:2.3:a:percona:xtrabackup:2.4.2:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":57,"criteria":58,"vulnerable":4},"2.4.3","cpe:2.3:a:percona:xtrabackup:2.4.3:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":60,"criteria":61,"vulnerable":4},"2.4.4","cpe:2.3:a:percona:xtrabackup:2.4.4:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":65,"criteria":66,"vulnerable":4},"opensuse","leap","42.1","cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":68,"criteria":69,"vulnerable":4},"42.2","cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",{"vendor":71,"product":72,"version":73,"criteria":74,"vulnerable":4},"fedoraproject","fedora","24","cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*",{"vendor":71,"product":72,"version":76,"criteria":77,"vulnerable":4},"25","cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",10,[80,85,88,94,98,101,105,108,113,115,117,119,121,123,125,127],{"url":81,"source":82,"tags":83},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2017-01\u002Fmsg00125.html","Opensuse",[84],"Third Party Advisory",{"url":86,"source":82,"tags":87},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2017-01\u002Fmsg00126.html",[84],{"url":89,"source":90,"tags":91},"https:\u002F\u002Fbugs.launchpad.net\u002Fpercona-xtrabackup\u002F+bug\u002F1643949","Launchpad",[92,93,84],"Issue Tracking","Patch",{"url":95,"source":96,"tags":97},"https:\u002F\u002Fgithub.com\u002Fpercona\u002Fpercona-xtrabackup\u002Fpull\u002F266","GitHub",[92,93,84],{"url":99,"source":96,"tags":100},"https:\u002F\u002Fgithub.com\u002Fpercona\u002Fpercona-xtrabackup\u002Fpull\u002F267",[92,93,84],{"url":102,"source":103,"tags":104},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FBAHI6ETS22FJCMLW7A6SICFKQXF5G2VI\u002F","Fedoraproject",[],{"url":106,"source":103,"tags":107},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FZBVCP6KLFVGG6HSGLHLTMZRD6C4IJSZP\u002F",[],{"url":109,"source":110,"tags":111},"https:\u002F\u002Fwww.percona.com\u002Fblog\u002F2017\u002F01\u002F12\u002Fcve-2016-6225-percona-xtrabackup-encryption-iv-not-set-properly\u002F","Percona",[112],"Vendor Advisory",{"url":81,"source":82,"tags":114},[84],{"url":86,"source":82,"tags":116},[84],{"url":89,"source":90,"tags":118},[92,93,84],{"url":95,"source":96,"tags":120},[92,93,84],{"url":99,"source":96,"tags":122},[92,93,84],{"url":102,"source":103,"tags":124},[],{"url":106,"source":103,"tags":126},[],{"url":109,"source":110,"tags":128},[112],16,[131],{"id":132,"name":133,"description":134,"extendedDescription":135,"status":136,"abstraction":137,"structure":138},"CWE-326","Inadequate Encryption Strength","The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.","A weak encryption scheme can be subjected to brute force attacks that have a reasonable chance of succeeding using current attack methods and resources.","Draft","Class","Simple",1,false,[],{"title":143,"metaDescription":144,"keywords":145,"canonicalUrl":146,"structuredData":147},"What is CVE-2016-6225? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-6225, a medium severity cyber security vulnerability from 2017. xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x befor...","CVE-2016-6225, CVE-2016-6225 vulnerability, CVE-2016-6225 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, percona security, opensuse security, fedoraproject security, xtrabackup vulnerability, leap vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2016-6225",{"@context":148,"@type":149,"headline":143,"description":144,"datePublished":10,"dateModified":11,"author":150,"publisher":154,"about":158,"mainEntityOfPage":162,"articleSection":165,"keywords":166},"https:\u002F\u002Fschema.org","TechArticle",{"@type":151,"name":152,"url":153},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":151,"name":152,"url":153,"logo":155},{"@type":156,"url":157},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":159,"name":6,"description":160,"additionalType":161},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":163,"@id":164},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-6225","Cybersecurity","CVE-2016-6225, CVE-2016-6225 vulnerability, CVE-2016-6225 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[168,186,194],{"Operator":15,"Negate":15,"Nodes":169},[170],{"Operator":171,"Negate":15,"CPEMatch":172},"OR",[173,176,178,180,182,184],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":174,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":175},"C075146A-0C1D-45F3-99D9-51D168E41AD4","2.3.5",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":177,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9C2803E9-6E5D-4F24-A45E-6779C0657624",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":179,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"6E53EF7C-834C-4CDD-930D-311DA77B6139",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":181,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3ADC43A4-444C-4F08-87AD-D6EF808D322A",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":183,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A8A95FB2-6982-46E1-B79A-65EF70D0A514",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":185,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F0440F3B-EC77-49C0-B1B0-9CF261D4CC30",{"Operator":15,"Negate":15,"Nodes":187},[188],{"Operator":171,"Negate":15,"CPEMatch":189},[190,192],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":191,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4863BE36-D16A-4D75-90D9-FD76DB5B48B7",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":193,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1EA337A3-B9A3-4962-B8BD-8E0C7C5B28EB",{"Operator":15,"Negate":15,"Nodes":195},[196],{"Operator":171,"Negate":15,"CPEMatch":197},[198,200],{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":199,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":201,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"772E9557-A371-4664-AE2D-4135AAEB89AA",[],[],{"lastModified":11,"cacheTime":205,"version":32},1792243163433,{"score":207,"band":208,"action":209,"scoredAt":210},23,"Low","Monitor","2026-10-17T08:28:32.656494+00:00"]