Vulnerabilities > CVE-2016-5655 - Multiple Security vulnerability in Misys FusionCapital Opics Plus VU#682704
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE network
misys
Summary
Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate. <a href="http://cwe.mitre.org/data/definitions/295.html">CWE-295: Improper Certificate Validation</a>
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |