CVE-2016-8022

—

CVSS 3.0

7.5 high

EPSS

13%p96

Published

Mar 14, 2017 (Mar 14, 2017)

Modified

Jun 17, 2026

Description

Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attacker to execute arbitrary code or cause a denial of service via a crafted authentication cookie.

Vendors: mcafee
Products: virusscan enterprise
Weakness: CWE-287
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (13.3%)

In the news2 stories

Hacking McAfee VirusScan Enterprise for Linux, upgrade it asap

Security AffairsDec 13, 15:41 UTC · Dec 13, 2016Exploit / PoC CVE-2016-8022 CVE-2016-8023 CVE-2016-8021+1 CVEs

McAfee Virus Scan Enterprise opens Linux machines to remote attackers

Help Net SecurityDec 13, 00:00 UTC · Dec 13, 2016Vulnerability CVE-2016-8022 CVE-2016-8023 CVE-2016-8021+1 CVEs