Vulnerabilities > CVE-2016-5662 - Unspecified vulnerability in Accellion Kiteworks Appliance Kw2016.03.00

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
accellion

Summary

Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors.

Vulnerable Configurations

Part Description Count
Application
Accellion
1