Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-946v-pv29-q7hv

Опубликовано: 21 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local attacker to perform a sideloading attack by using a specific file name. This could result in the user gaining elevated permissions and being able to execute arbitrary code as there were insufficient checks on the executable being signed by McAfee.

An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local attacker to perform a sideloading attack by using a specific file name. This could result in the user gaining elevated permissions and being able to execute arbitrary code as there were insufficient checks on the executable being signed by McAfee.

EPSS

Процентиль: 45%
0.00227
Низкий

8.2 High

CVSS3

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 7.9
nvd
больше 3 лет назад

An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local attacker to perform a sideloading attack by using a specific file name. This could result in the user gaining elevated permissions and being able to execute arbitrary code as there were insufficient checks on the executable being signed by McAfee.

EPSS

Процентиль: 45%
0.00227
Низкий

8.2 High

CVSS3

Дефекты

CWE-427