Vulnerability in Mcafee Security Information And Event Management
CVE-2016-8006
Authentication bypass vulnerability in Enterprise Security Manager (ESM) and License Manager (LM) in Intel Security McAfee Security Information and Event Management (SIEM) 9.6.0 MR3 allows an administrator to make changes to other SIEM users' information including user passwords without supplying the current administrator password a second time via the GUI or GUI terminal commands.
EPSS: 0.003 (24.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Mcafee Security_information_and_event_management
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@intel.com (x_refsource_MISC)
- secure@intel.com (x_refsource_CONFIRM, Vendor Advisory)
- secure@intel.com (vdb-entry, x_refsource_BID)
- secure@intel.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2016-8006?
- CVE-2016-8006 is a medium-severity vulnerability in Mcafee Security Information And Event Management, classified under CWE-264. CVSS score: 4.4/10. Published 2017-01-05.
- How severe is CVE-2016-8006?
- Medium severity. CVSS v3 base score is 4.4 out of 10.