McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC
CVE-2018-6690

6.1MEDIUM

Key Information:

Vendor
Mcafee
Vendor
CVE Published:
18 September 2018

Summary

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system.

Affected Version(s)

McAfee Application Control (MAC) x86 8.0.0 HF 4

References

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

McAfee credits Paul W for reporting this flaw.
.