CVE-2012-4593 McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users....
MediumCVSS 5.0
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users to bypass authentication by executing a command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee application control | = 5.1.0 | No fix listed |
| mcafee application control | = 5.1.1 | No fix listed |
| mcafee application control | = 5.1.2 | No fix listed |
| mcafee application control | = 6.0.0 | No fix listed |
| mcafee change control | = 5.1.0 | No fix listed |
| mcafee change control | = 5.1.1 | No fix listed |
| mcafee change control | = 5.1.2 | No fix listed |
| mcafee change control | = 6.0.0 | No fix listed |
References
- kc.mcafee.com vendor-advisory