PT-2017-9456 · Mcafee · Mcafee Security Information/Event Management

Claudio Cinquino + 1 · Publicado 2017-01-05 · Atualizado 2017-01-18 · CVE-2016-8006

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions McAfee Security Information and Event Management (SIEM) version 9.6.0 MR3

Description An issue in McAfee Security Information and Event Management (SIEM) allows an administrator to bypass authentication and make changes to other SIEM users' information, including user passwords, without providing the current administrator password a second time via the GUI or GUI terminal commands.

Recommendations For McAfee Security Information and Event Management (SIEM) version 9.6.0 MR3, consider restricting access to user information management features until a fix is available. As a temporary workaround, limit the use of the GUI and GUI terminal commands for making changes to user passwords to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-8006

Produtos afetados

Mcafee Security Information/Event Management

Referências · 6

• https://osv.dev/vulnerability/CVE-2016-8006 · Aviso do Fabricante
• https://kc.mcafee.com/corporate/index?page=content&id=KB87744 · Aviso do Fabricante
• http://quantumleap.it/mcafee-siem-esm-esmrec-authentication-bypass-vulnerability · Nota
• http://securityfocus.com/bid/95313 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-8006 · Nota de Segurança
• https://narthar.it/DOC/McAfee_SIEM_9.6_Authentication_bypass_vulnerability.html · Nota