CVE-2016-2352

High

Published: 07/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users to execute arbitrary commands by leveraging the YUM_CLIENT restricted-user role.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system and potential takeover of the device by malicious users.

Recommendation

It is recommended to update the appliance to version FTA_9_12_40 or later to mitigate the risk associated with this vulnerability.

Other vulnerabilities in Accellion File Transfer Appliance (FTA)

CVE-2016-2353High
The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add an SSH key to an arbitrary group, potentially leading to unauthorized privilege escalation.

Original NVD description (English source)

The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users to execute arbitrary commands by leveraging the YUM_CLIENT restricted-user role.