CVE-2016-2353

High

Published: 07/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add an SSH key to an arbitrary group, potentially leading to unauthorized privilege escalation.

Risk Assessment

This vulnerability may allow local users to escalate their privileges, posing a risk of unauthorized access to the system.

Recommendation

It is recommended to update the appliance to version FTA_9_12_40 or later to mitigate this vulnerability.

Other vulnerabilities in Accellion File Transfer Appliance (FTA)

CVE-2016-2352High
The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users to execute arbitrary commands by leveraging the YUM_CLIENT restricted-user role.

Original NVD description (English source)

The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add an SSH key to an arbitrary group, and consequently gain privileges, via unspecified vectors.