What’s Vulnerable › Vulnerabilities

CVE-2016-8006

• Severity: medium (CVSS 4.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-01-05 · updated 2026-06-17
• Weakness: CWE-264

Description

Authentication bypass vulnerability in Enterprise Security Manager (ESM) and License Manager (LM) in Intel Security McAfee Security Information and Event Management (SIEM) 9.6.0 MR3 allows an administrator to make changes to other SIEM users' information including user passwords without supplying the current administrator password a second time via the GUI or GUI terminal commands.

Affected products

• McAfee Security Information And Event Management: through 9.6.0

References

• http://www.quantumleap.it/mcafee-siem-esm-esmrec-authentication-bypass-vulnerability/
• http://www.securityfocus.com/bid/95313
• https://kc.mcafee.com/corporate/index?page=content&id=KB87744
• https://www.narthar.it/DOC/McAfee_SIEM_9.6_Authentication_bypass_vulnerability.html
• http://www.quantumleap.it/mcafee-siem-esm-esmrec-authentication-bypass-vulnerability/
• http://www.securityfocus.com/bid/95313
• https://kc.mcafee.com/corporate/index?page=content&id=KB87744
• https://www.narthar.it/DOC/McAfee_SIEM_9.6_Authentication_bypass_vulnerability.html

Get alerted when CVE-2016-8006 or the next vulnerability affects your stack