Home  >  CVE-2016-2353
CVE Details for CVE: CVE-2016-2353
Summary
The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add an SSH key to an arbitrary group, and consequently gain privileges, via unspecified vectors.
Timestamps
Last major update 10-05-2016 - 15:15
Published 07-05-2016 - 14:59
Last modified 10-05-2016 - 15:15
References
Vulnerable Configurations
  • cpe:2.3:a:accellion:file_transfer_appliance:8_0_540:*:*:*:*:*:*:*
    cpe:2.3:a:accellion:file_transfer_appliance:8_0_540:*:*:*:*:*:*:*
  • cpe:2.3:a:accellion:file_transfer_appliance:9_11_200:*:*:*:*:*:*:*
    cpe:2.3:a:accellion:file_transfer_appliance:9_11_200:*:*:*:*:*:*:*
  • cpe:2.3:a:accellion:file_transfer_appliance:9_11_210:*:*:*:*:*:*:*
    cpe:2.3:a:accellion:file_transfer_appliance:9_11_210:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
7.2
Impact
10.0
Exploitability
3.9
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
CVSS3
Base
7.8
Impact
5.9
Exploitability
1.8
Access
Attack ComplexityAttack vectorPrivileges RequiredScopeUser Interaction
LOW LOCAL LOW UNCHANGED NONE
Impact
ConfidentialityIntegrityAvailability
HIGH HIGH HIGH
VIA4 references
cvss-vector via4
AV:L/AC:L/Au:N/C:C/I:C/A:C
cvss3-vector via4
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
refmap via4
cert-vn VU#505560
misc http://devco.re/blog/2016/04/21/how-I-hacked-facebook-and-found-someones-backdoor-script-eng-ver/