CVE-2016-8020
HighSummary
A vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 and earlier allows remote authenticated users to execute arbitrary code via a crafted HTTP request parameter.
Risk Assessment
This threat could lead to unauthorized access to the system and potential takeover by an attacker.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 and earlier
See all- CVE-2016-8024High
The vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) involves improper neutralization of CRLF sequences in HTTP headers, allowing a remote unauthenticated attacker to obtain sensitive information via server HTTP response spoofing.
- CVE-2016-8023High
A vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows a remote unauthenticated attacker to bypass server authentication via a crafted authentication cookie.
Original NVD description (English source)
Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to execute arbitrary code via a crafted HTTP request parameter.