Security feature bypass

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell...

CVE-2018-6668 Bypass Application Control with simple DLL

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell...

CVE-2018-6668

CVE-2018-6668 affects McAfee Application Control and Change Control, version 7.0.1 and earlier. A whitelist bypass vulnerability allows execution bypass, e.g., via a simple DLL through interpreters such as PowerShell. The connected sources confirm the issue and its impact is constrained to bypass...

McAfee Application Control and Change Control Security Restriction Bypass Vulnerability (CNVD-2019-07311)

McAfee Application Control and Change Control are both software from McAfee, Inc. Application Control is a suite of program control software that prevents devices from running unauthorized applications. Change Control is a change control software that blocks unauthorized changes to applications. ...

McAfee Application Control and Change Control Security Restriction Bypass Vulnerability

McAfee Application Control and Change Control are both software from McAfee, Inc. Application Control is a suite of program control software that prevents devices from running unauthorized applications. Change Control is a change control software that blocks unauthorized changes to applications. ...

CVE-2018-6669

McAfee Application Control and Change Control (versions 7.0.1 and earlier) contain a whitelist bypass vulnerability. A remote or local user can execute blacklisted files via an ASP.NET form, bypassing the intended restrictions. The CVE has CVSS v3.0 base score 8.0 (HIGH) with ADJACENT network att...

CVE-2018-6669

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows a remote or local user to execute blacklisted files through an ASP.NET form...

Security feature bypass

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows a remote or local user to execute blacklisted files through an ASP.NET form...

CVE-2018-7358

ZTE ZXHN H168N product with versions V2.2.0PK1.2T5, V2.2.0PK1.2T2, V2.2.0PK11T7 and V2.2.0PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations...

CVE-2018-7358

CVE-2018-7358 affects ZTE ZXHN H168N devices (versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7, V2.2.0_PK11T) and is described as an improper change control vulnerability that may allow an unauthenticated attacker to perform unauthorized operations. Connected references document an access-c...

CVE-2018-7358

ZTE ZXHN H168N product with versions V2.2.0PK1.2T5, V2.2.0PK1.2T2, V2.2.0PK11T7 and V2.2.0PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations...

McAfee Application and Change Control Security Bypass Vulnerability

McAfee Application and Change Control is a suite of program control software from the U.S.-based McAfee. The software protects enterprise servers and endpoints from unauthorized applications and malware threats by using a dynamic trust model. A security bypass vulnerability exists in McAfee...

McAfee Application and Change Control (MACC) Arbitrary Code Execution Vulnerability

McAfee Application and Change Control MACC is a suite of program control software from the American company McAfee. The software protects enterprise servers and endpoints from unauthorized applications and malware threats by using a dynamic trust model. An arbitrary code execution vulnerability...

CVE-2018-6690

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control MACC 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system...

Default credentials

Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...

CVE-2018-6690

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control MACC 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system...

CVE-2017-3912

Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...

CVE-2017-3912

Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...

CVE-2018-6690 McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control MACC 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system...

CVE-2017-3912 McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass

Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...