PT-2016-6620

CVE-2016-5662

Published

2016-08-26

Updated

2016-11-28

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Accellion Kiteworks appliances versions prior to kw2016.03.00

Description The issue allows local users to gain privileges via unspecified vectors due to the use of setuid-root permissions for /opt/bin/cli.

Recommendations For versions prior to kw2016.03.00, update to version kw2016.03.00 or later to resolve the issue.

Exploitability

Fix

Researchers

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾