Lucene search

IntelCVE-2016-8026

HistoryMar 14, 2017 - 10:59 p.m.

CVE-2016-8026

2017-03-1422:59:01

CWE-264

intel

web.nvd.nist.gov

cve-2016-8026

intel

security

mcafee

vulnerability

command execution

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

12.6%

JSON

Arbitrary command execution vulnerability in Intel Security McAfee Security Scan Plus (SSP) 3.11.469 and earlier allows authenticated users to gain elevated privileges via unspecified vectors.

Affected configurations

Nvd

Vulners

Node

mcafeesecurity_scan_plusRange≤3.11.469

VendorProductVersionCPE
mcafeesecurity_scan_plus*cpe:2.3:a:mcafee:security_scan_plus:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mcafee	security_scan_plus	*	cpe:2.3:a:mcafee:security_scan_plus::::::::

CNA Affected

[
  {
    "product": "McAfee Security Scan Plus (SSP)",
    "vendor": "Intel",
    "versions": [
      {
        "status": "affected",
        "version": "3.11.469 and earlier"
      }
    ]
  }
]

References

www.securityfocus.com/bid/98068

service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102614

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2016-8026