Trellix / McAfee Endpoint Security Detection (Windows SMB Login)

SMB login-based detection of Trellix / McAfee Endpoint Security. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

McAfee Endpoint Security Threat Prevention Detection (Windows SMB Login)

Detects the installed version of McAfee Endpoint Security Threat Prevention for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

The vulnerability of the McAfee Agent for Linux client component, which allows a hacker to execute arbitrary commands.

The vulnerability of the McAfee Agent for Linux client component is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

CVE-2019-3615 Data Leakage Vulnerability in McAfee Database Security web interface

Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen...

CVE-2019-3615

CVE-2019-3615 affects the web interface of McAfee Database Security prior to version 4.6.6 (March 2019). The issue allows local users to exfiltrate passwords by exploiting incorrectly autofilled password fields on the admin login screen. Impact is described in NT terms as exposure of passwords an...

CVE-2019-3615

Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen...

CVE-2019-3615

Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen...

Code injection

Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen...

McAfee ePO 5.9.1 - Registered Executable Local Access Bypass Vulnerability

Exploit for windows platform in category web applications Exploit Title: McAfee ePO 5.9.1 Registered Executable Local Access Bypass Exploit Author: @leonjza Vendor Homepage: https://www.mcafee.com/ Software Link: https://www.mcafee.com/enterprise/en-us/products/epolicy-orchestrator.html Version:...

McAfee ePO 5.9.1 Registered Executable Local Access Bypass

Exploit Title: McAfee ePO 5.9.1 Registered Executable Local Access Bypass Date: 2019-03-07 Exploit Author: @leonjza Vendor Homepage: https://www.mcafee.com/ Software Link: https://www.mcafee.com/enterprise/en-us/products/epolicy-orchestrator.html Version: ePO v5.9.1 Tested on: Windows Server 2012...

McAfee ePO 5.9.1 - Registered Executable Local Access Bypass

Exploit Title: McAfee ePO 5.9.1 Registered Executable Local Access Bypass Date: 2019-03-07 Exploit Author: @leonjza Vendor Homepage: https://www.mcafee.com/ Software Link: https://www.mcafee.com/enterprise/en-us/products/epolicy-orchestrator.html Version: ePO v5.9.1 Tested on: Windows Server 2012...

McAfee ePO 5.9.1 - Registered Executable Local Access Bypass

McAfee ePO 5.9.1 - Registered Executable Local Access Bypass Exploit Title: McAfee ePO 5.9.1 Registered Executable Local Access Bypass Date: 2019-03-07 Exploit Author: @leonjza Vendor Homepage: https://www.mcafee.com/ Software Link:...

RSAC 2019: New Operation Sharpshooter Data Reveals Higher Complexity, Scope

SAN FRANCISCO – An insidious reconnaissance campaign discovered in 2018, dubbed Operation Sharpshooter, is much more widespread than previously thought, researchers said. Operation Sharpshooter was first disclosed in December 2018, using a never-before-seen implant framework to infiltrate global...

McAfee Agent Information Disclosure Vulnerability

McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator antivirus management platform and managed products. An information disclosure vulnerability exists in the remote login feature in McAfee MA version 5.x. A remote attack...

McAfee Endpoint Security (ENS) Microsoft Windows Client Elevation of Privilege Vulnerability

McAfee Endpoint Security is McAfee's latest antivirus product that provides comprehensive protection against network security threats. An elevation of privilege vulnerability exists in the Microsoft Windows client for McAfee Endpoint Security ENS 10.6.1 and earlier. A local user can exploit the...

McAfee Agent Denial of Service Vulnerability

The McAfee Agent is a distributed component of McAfee ePolicy Orchestrator McAfee ePO that downloads and enforces policies, performs client-side tasks such as deployments and updates, and also uploads events and provides other data about the status of each system. A denial of service vulnerabilit...

CVE-2019-3582

CVE-2019-3582 affects McAfee Endpoint Security (ENS) Windows client up to and including version 10.6.1. The connected sources consistently describe a local privilege escalation vulnerability in the Windows client, but do not provide detailed root cause, affected subcomponents, or exact vulnerable...

CVE-2019-3598 McAfee Agent update fixes a vulnerability in handling UDP requests

Buffer Access with Incorrect Length Value in McAfee Agent MA 5.x allows remote unauthenticated users to potentially cause a denial of service via specifically crafted UDP packets...

CVE-2019-3599 McAfee Agent update fixes an Information Disclosure vulnerability

Information Disclosure vulnerability in Remote logging which is disabled by default in McAfee Agent MA 5.x allows remote unauthenticated users to access sensitive information via remote logging when it is enabled...

CVE-2019-3599

CVE-2019-3599 describes an information-disclosure vulnerability in the remote-logging feature of McAfee Agent (MA) 5.x, where an unauthenticated, remote user could access sensitive information if remote logging is enabled. Public entries consistently identify the affected component as MA 5.x with...