Path traversal

Unquoted executable path vulnerability in Client Management and Gateway components in McAfee now Intel Security ePO Deep Command eDC 2.2 and 2.1 allows authenticated users to execute a command of their choice via dropping a malicious file for the path...

CVE-2015-8988

CVE-2015-8988 concerns an unquoted executable path vulnerability in the McAfee/ePO Deep Command (eDC) Client Management and Gateway components. The affected versions are eDC 2.2 and 2.1. The issue allows an authenticated user to execute arbitrary commands by dropping a malicious file in the unquo...

PT-2017-7519

Name of the Vulnerable Software and Affected Versions McAfee ePO Deep Command eDC versions 2.1 through 2.2 Description The issue allows authenticated users to execute a command of their choice via dropping a malicious file for an unquoted executable path in the Client Management and Gateway...

CVE-2015-8988: Improper Neutralization of Special Elements used in a Command

Unquoted executable path vulnerability in Client Management and Gateway components in McAfee now Intel Security ePO Deep Command eDC 2.2 and 2.1 allows authenticated users to execute a command of their choice via dropping a malicious file for the path...

Design/Logic Flaw

Multiple unquoted Windows search path vulnerabilities in the 1 Client Management and 2 Gateway in McAfee ePO Deep Command 2.1 and 2.2 before HF 1058831 allow local users to gain privileges via unspecified vectors...

PT-2015-6373

Name of the Vulnerable Software and Affected Versions McAfee ePO Deep Command versions 2.1 through 2.2 before HF 1058831 Description The issue concerns unquoted Windows search path vulnerabilities in the Client Management and Gateway components. This could allow local users to gain privileges via...

CVE-2015-3987: Untrusted Search Path

Multiple unquoted Windows search path vulnerabilities in the 1 Client Management and 2 Gateway in McAfee ePO Deep Command 2.1 and 2.2 before HF 1058831 allow local users to gain privileges via unspecified vectors...