McAfee McAfee Agent (MA) is a client component from Mcafee that provides secure communication between ePolicy Orchestrator (antivirus management platform) and the managed products. Agent uses openssl.cnf to specify the OPENSSLDIR variable as a subdirectory in the installation directory during the build process. A low-privilege attacker could exploit the vulnerability to create a subdirectory and execute arbitrary code with SYSTEM privileges by creating the appropriate path to a specifically created malicious openssl.cnf file.
CPE | Name | Operator | Version |
---|---|---|---|
mcafee mcafee agent for windows | lt | 5.7.5 |