CVE-2016-2288
HighSummary
Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file.
Risk Assessment
The organization may be exposed to unauthorized changes in the system, potentially leading to privilege escalation and security breaches.
Recommendation
It is recommended to update Cogent DataHub to version 7.3.10 or later to mitigate this vulnerability.
Other vulnerabilities in Cogent DataHub
See all- CVE-2014-2353High
Cross-site scripting (XSS) vulnerability in Cogent DataHub before version 7.3.5 allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors.
- CVE-2014-3789High
GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before version 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.
- CVE-2014-3788High
A heap-based buffer overflow in the Web Server in Cogent DataHub before version 7.3.5 allows remote attackers to execute arbitrary code by sending a negative value in the Content-Length field in a request.
Original NVD description (English source)
Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file.