5186 matches found
CVE-2020-7299 Sensitive Data Exposure vulnerability in McAfee True Key Windows Client
Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key TK prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific...
CVE-2020-7299
CVE-2020-7299 affects the McAfee True Key Windows client. The vulnerability is a cleartext storage of sensitive information in memory, enabling a local administrator to access another user’s passwords on the same machine by triggering a process dump. Affected are True Key versions prior to 6.2.10...
CVE-2020-7299: Insufficiently Protected Credentials
Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key TK prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific...
PT-2020-6120
Name of the Vulnerable Software and Affected Versions McAfee True Key Windows Client versions prior to 6.2.109.2 Description The issue is related to insufficient protection of registration data, allowing an attacker to gain unauthorized access to protected information. A local user with...
CVE-2020-7309
Cross Site Scripting vulnerability in ePO extension in McAfee Application Control MAC prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section...
CVE-2020-7309
Cross Site Scripting vulnerability in ePO extension in McAfee Application Control MAC prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section...
CVE-2020-7309
Cross Site Scripting vulnerability in ePO extension in McAfee Application Control MAC prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section...
Cross site scripting
Cross Site Scripting vulnerability in ePO extension in McAfee Application Control MAC prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section...
CVE-2020-7309
CVE-2020-7309 affects the ePO extension of McAfee Application Control (MAC) prior to version 8.3.1. The vulnerability is a Cross Site Scripting (XSS) flaw in the policy discovery input, allowing an attacker to inject arbitrary web script or HTML. Affected component: ePO extension’s policy discove...
CVE-2020-7309 Cross Site Scripting vulnerability in ePO extension of MACC
Cross Site Scripting vulnerability in ePO extension in McAfee Application Control MAC prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section...
CVE-2020-7309: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in ePO extension in McAfee Application Control MAC prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section...
PT-2020-19542
Name of the Vulnerable Software and Affected Versions McAfee Application Control MAC versions prior to 8.3.1 Description A Cross Site Scripting issue allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section. Recommendations For...
Dopple-Ganging Up on Facial Recognition
ARCHIVED STORY Dopple-ganging up on Facial Recognition Systems By Steve Povolny · August 25, 2020 Co-authored with Jesse Chick, OSU Senior and Former McAfee Intern, Primary Researcher. Special thanks to Dr. Catherine Huang, McAfee Advanced Analytics Team Special thanks to Kyle Baldes, Former McAf...
CVE-2020-7310
Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection MTP trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file...
CVE-2020-7310
Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection MTP trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file...
CVE-2020-7310
Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection MTP trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file...
Privilege escalation
Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection MTP trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file...
CVE-2020-7310
CVE-2020-7310 describes a privilege-escalation flaw in the installer of McAfee Total Protection (MTP) trial before version 4.0.161.1. The issue arises from manipulating symbolic links to redirect McAfee file operations to an unintended file, enabling local users to modify files governed by write-...
CVE-2020-7310 Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial installer
Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection MTP trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file...
