CVE-2016-8023
HighSummary
A vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows a remote unauthenticated attacker to bypass server authentication via a crafted authentication cookie.
Risk Assessment
An attacker can gain access to the system without authentication, posing a serious threat to the security of the organization's data and systems.
Recommendation
It is recommended to upgrade to the latest version of the software to eliminate this vulnerability and to monitor logs for potential unauthorized access attempts.
Other vulnerabilities in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 and earlier
See all- CVE-2016-8024High
The vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) involves improper neutralization of CRLF sequences in HTTP headers, allowing a remote unauthenticated attacker to obtain sensitive information via server HTTP response spoofing.
- CVE-2016-8020High
A vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 and earlier allows remote authenticated users to execute arbitrary code via a crafted HTTP request parameter.
Original NVD description (English source)
Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attacker to bypass server authentication via a crafted authentication cookie.