First published: Tue Mar 29 2016(Updated: )
Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Cogent Datahub | <=7.3.9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-2288 is classified as a high severity vulnerability due to the potential for local privilege escalation.
To mitigate CVE-2016-2288, upgrade to Cogent DataHub version 7.3.10 or later.
CVE-2016-2288 affects users of Cogent DataHub versions prior to 7.3.10.
CVE-2016-2288 requires local access, so it cannot be exploited remotely.
Exploitation of CVE-2016-2288 allows local users to gain higher privileges on the system.