CVE-2016-5662: High severity accellion kiteworks vulnerability
Published Aug 26, 2016
·Updated
Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors.
Affected Software
1 affected component
Accellion Kiteworks appliance<=kw2016.03.00
Event History
Aug 26, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-5662?
CVE-2016-5662 is classified as a high-severity vulnerability due to the potential for privilege escalation.
2
How do I fix CVE-2016-5662?
To mitigate CVE-2016-5662, upgrade to Accellion Kiteworks appliance version kw2016.03.01 or later.
3
Who is affected by CVE-2016-5662?
Local users of Accellion Kiteworks appliances prior to version kw2016.03.00 are affected by CVE-2016-5662.
4
What systems are vulnerable to CVE-2016-5662?
All Accellion Kiteworks appliances running versions up to and including kw2016.03.00 are vulnerable to CVE-2016-5662.
5
What type of vulnerability is CVE-2016-5662?
CVE-2016-5662 is a privilege escalation vulnerability that allows local users to gain higher-level permissions.