Lucene search

K
cvelistTrellixCVELIST:CVE-2018-6756
HistoryDec 06, 2018 - 11:00 p.m.

CVE-2018-6756 True Key (TK) Windows Client - Authentication Abuse vulnerability

2018-12-0623:00:00
trellix
www.cve.org
2

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0

Percentile

5.1%

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware.

CNA Affected

[
  {
    "platforms": [
      "x86"
    ],
    "product": "True Key",
    "vendor": "McAfee",
    "versions": [
      {
        "lessThanOrEqual": "5.1.230.7",
        "status": "affected",
        "version": "5.1.230.7",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVELIST:CVE-2018-6756