CVE-2022-1823

🗓️ 20 Jun 2022 10:15:22Reported by trellixType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 85 Views

Improper privilege management vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 allows local user to modify a configuration file, leading to LOLBin attack and arbitrary code execution

Reporter	Title	Published	Views	Family All 10
attackerkb	CVE-2022-1823	20 Jun 202211:15	–	attackerkb
CNNVD	McAfee Consumer Product Removal Tool 代码问题漏洞	20 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-1823 McAfee MCPR privilege escalation	20 Jun 202210:15	–	cvelist
EUVD	EUVD-2022-25099	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1823	20 Jun 202211:15	–	nvd
OSV	CVE-2022-1823	20 Jun 202211:15	–	osv
Prion	Privilege escalation	20 Jun 202211:15	–	prion
Positive Technologies	PT-2022-14142 · Mcafee · Mcafee Consumer Product Removal Tool	20 Jun 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-1823: Improper Privilege Management	20 Jun 202200:00	–	rapid7
RedhatCVE	CVE-2022-1823	5 Feb 202522:52	–	redhatcve

NVD

Vulners

Node

mcafee consumer_product_removal_toolRange<10.4.128

[
  {
    "product": "McAfee Consumer Product Removal Tool",
    "vendor": "McAfee,LLC",
    "versions": [
      {
        "lessThan": "10.4.128",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]