CVE-2016-8006
4.4
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Exploitability: 0.8 / Impact: 3.6
Source: NVD
Description
Authentication bypass vulnerability in Enterprise Security Manager (ESM) and License Manager (LM) in Intel Security McAfee Security Information and Event Management (SIEM) 9.6.0 MR3 allows an administrator to make changes to other SIEM users' information including user passwords without supplying the current administrator password a second time via the GUI or GUI terminal commands.
Affected (1)
Products: Mcafee: Security Information And Event Management
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 9.6.0 |
Related CWEs
References (8)
Source: secure@intel.com
Source: secure@intel.com
Source: secure@intel.com
Vendor Advisory
Source: secure@intel.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.