McAfee Total Protection CVE-2019-3648 Local Privilege Escalation Vulnerability

Description

Multiple McAfee products are prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. McAfee Total Protection (MTP) version 16.0.R22 and prior are vulnerable.

Technologies Affected

• McAfee Total Protection 16.0.R17
• McAfee Total Protection 16.0.R18
• McAfee Total Protection 16.0.R20
• McAfee Total Protection 16.0.R21
• McAfee Total Protection 16.0.R22

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
Local access should be limited to trusted users only.

Updates are available. Please see the references or vendor advisory for more information.