CVE-2016-8018: CSRF
Published Mar 14, 2017
·Updated
Cross-site request forgery (CSRF) vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to execute unauthorized commands via a crafted user input.
Affected Software
1 affected component
McAfee Virusscan Enterprise Linux<=2.0.3
Event History
Mar 14, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-8018?
CVE-2016-8018 is classified as a moderate severity cross-site request forgery vulnerability.
2
How do I fix CVE-2016-8018?
To mitigate CVE-2016-8018, upgrade Intel Security VirusScan Enterprise Linux to version 2.0.4 or later.
3
What systems are affected by CVE-2016-8018?
CVE-2016-8018 affects Intel Security VirusScan Enterprise Linux versions 2.0.3 and earlier.
4
What are the potential impacts of CVE-2016-8018?
Exploitation of CVE-2016-8018 allows authenticated remote attackers to execute unauthorized commands.
5
Who is vulnerable to CVE-2016-8018?
Authenticated users of affected versions of McAfee VirusScan Enterprise Linux are vulnerable to CVE-2016-8018.