McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC
CVE-2018-6690
6.1MEDIUM
Key Information:
- Vendor
- Mcafee
- Vendor
- CVE Published:
- 18 September 2018
Summary
Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system.
Affected Version(s)
McAfee Application Control (MAC) x86 8.0.0 HF 4
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
McAfee credits Paul W for reporting this flaw.