CVE-2016-2352: High severity accellion secure file transfer appliance vulnerability
Published May 7, 2016
·Updated
The Accellion File Transfer Appliance (FTA) before FTA91240 allows remote authenticated users to execute arbitrary commands by leveraging the YUMCLIENT restricted-user role.
Affected Software
1 affected component
Accellion File Transfer Appliance<=9_11_210
Event History
May 7, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-2352?
CVE-2016-2352 has a high severity rating due to the potential for remote authenticated users to execute arbitrary commands.
2
How do I fix CVE-2016-2352?
To fix CVE-2016-2352, upgrade to Accellion File Transfer Appliance version 9_12_40 or later.
3
Who is affected by CVE-2016-2352?
CVE-2016-2352 affects Accellion File Transfer Appliance versions prior to 9_12_40.
4
What type of vulnerability is CVE-2016-2352?
CVE-2016-2352 is a command injection vulnerability.
5
What should I do if I cannot upgrade to mitigate CVE-2016-2352?
If an upgrade is not possible, restrict access to the YUM_CLIENT restricted-user role to prevent unauthorized command execution.