VULNERABILITY INTELLIGENCE

CVE-2009-5116

CVSS score6.5 MEDIUM
EPSS probability1.64%
CISA KEVNot currently listed
Published2012-08-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client account.

Weakness classification

  • CWE-287: Improper Authentication

Primary references