CVE-2019-3588

CVE-2019-3588 affects McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14. The issue is a privileges escalation in the Windows client (McTray.exe) that allows unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked. Impact ...

CVE-2019-3585 VSE Escalation of Privileges through Alert pop-up window

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges...

CVE-2019-3585

CVE-2019-3585 affects McAfee VirusScan Enterprise (VSE) 8.8 before Patch 14. The issue is a Privilege Escalation in the Microsoft Windows client (McTray.exe) where local attackers can interact with the On-Access Scan Messages – Threat Alert Window with elevated privileges by running McAfee Tray w...

CVE-2019-3585: Improper Privilege Management

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges...

CVE-2019-3588: Improper Privilege Management

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked...

McAfee VirusScan Enterprise for Linux <= 2.0.3 Multiple vulnerabilities (SB10316)

The remote host has a version of McAfee VirusScan Enterprise for Linux VSEL installed that is prior or equal to 2.0.3. It is, therefore, affected by a privilege escalation vulnerability which allows a malicious attacker the ability to delete files they do not have access to. %NASLMINLEVEL 70300 C...

McAfee VirusScan Enterprise < 8.8 Patch 14 Hotfix 116778 Privilege Escalation Vulnerability (SB10316)

The version of McAfee VirusScan Enterprise VSE installed on the remote Windows host is prior to 8.8 Patch 14 Hotfix 116778. It is, therefore, affected by a privilege escalation vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid136668; scriptversion"1.4";...

McAfee VirusScan Enterprise Privilege Mobilization Vulnerability

McAfee VirusScan Enterprise VSE is a suite of antivirus software from the American company McAfee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. A privilege extraction vulnerability exists in versions prior to...

CVE-2020-7267

Privilege Escalation vulnerability in McAfee VirusScan Enterprise VSE for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved...

Privilege escalation

Privilege Escalation vulnerability in McAfee VirusScan Enterprise VSE for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved...

CVE-2020-7267 Privilege Escalation vulnerability through symbolic links in VSEL

Privilege Escalation vulnerability in McAfee VirusScan Enterprise VSE for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved...

CVE-2020-7267

Affected software: McAfee VirusScan Enterprise for Linux (VSEL) prior to 2.0.3 Hotfix 2635000. Vulnerability details: Privilege escalation via manipulation of symbolic links to redirect a McAfee delete operation to an unintended file. The root cause is the handling of delete actions through symli...

CVE-2020-7266

Privilege Escalation vulnerability in McAfee VirusScan Enterprise VSE for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is...

CVE-2020-7266

Privilege Escalation vulnerability in McAfee VirusScan Enterprise VSE for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is...

CVE-2020-7266 Privilege Escalation vulnerability through symbolic links in VSE for Windows

Privilege Escalation vulnerability in McAfee VirusScan Enterprise VSE for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is...

CVE-2020-7266: Improper Handling of Insufficient Privileges

Privilege Escalation vulnerability in McAfee VirusScan Enterprise VSE for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is...

CVE-2020-7267: Improper Handling of Insufficient Privileges

Privilege Escalation vulnerability in McAfee VirusScan Enterprise VSE for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved...

The vulnerability of the McAfee VirusScan Enterprise anti-virus software is related to deficiencies in access control, allowing attackers to disclose protected information.

The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to view configuration information in text format through the graphical user interface...

McAfee VirusScan Enterprise 'McTray.exe' Privilege Escalation Vulnerability - Windows

McAfee VirusScan Enterprise is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee VirusScan Enterprise < 8.8 Patch 13 Privilege Escalation Vulnerability (SB10237)

The version of McAfee VirusScan Enterprise VSE installed on the remote Windows host is prior to 8.8 Patch 13. It is, therefore, affected by a privilege escalation vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid110272; scriptversion"1.6";...