Описание
Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program.
Ссылки
- MitigationVendor Advisory
- MitigationVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 8.3.4 (исключая)
cpe:2.3:a:mcafee:application_and_change_control:*:*:*:*:*:*:*:*
EPSS
Процентиль: 16%
0.00052
Низкий
4.4 Medium
CVSS3
4.4 Medium
CVSS3
Дефекты
CWE-269
CWE-269
Связанные уязвимости
CVSS3: 4.4
github
около 3 лет назад
Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program.
EPSS
Процентиль: 16%
0.00052
Низкий
4.4 Medium
CVSS3
4.4 Medium
CVSS3
Дефекты
CWE-269
CWE-269