CVE-2016-9869

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the SCINI driver may allow a low-privileged local attacker to modify the configuration and render the ScaleIO Data Client (SDC) server unavailable.

Score

CVSS 3.0 5.5 Medium

Status

Modified - security_alert@emc.com

Published

2017-01-06

Last modified

2024-08-06

Weaknesses

CWE-275

Affected products

• Scaleio (Emc)

References

• http://www.securityfocus.com/archive/1/539983/30/0/threaded
• http://www.securityfocus.com/bid/95303