Lucene search

K
cvelistTrellixCVELIST:CVE-2017-3912
HistorySep 18, 2018 - 10:00 p.m.

CVE-2017-3912 McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass

2018-09-1822:00:00
CWE-274
trellix
www.cve.org
6

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

AI Score

7.8

Confidence

High

EPSS

0

Percentile

12.6%

Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility.

CNA Affected

[
  {
    "platforms": [
      "x86"
    ],
    "product": "McAfee Application Control and Change Control (MACC)",
    "vendor": "McAfee",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.1"
      }
    ]
  },
  {
    "product": "McAfee Application Control and Change Control (MACC)",
    "vendor": "McAfee",
    "versions": [
      {
        "status": "affected",
        "version": "6.2.0"
      }
    ]
  }
]

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

AI Score

7.8

Confidence

High

EPSS

0

Percentile

12.6%

Related for CVELIST:CVE-2017-3912