CVE-2015-8988 Unquoted executable path vulnerability in Client Management and Gateway components in McAfee (now Intel Security) ePO Deep Command (eDC) 2.2 and 2.1 allows authenticated users to execute a command of....
HighCVSS 8.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unquoted executable path vulnerability in Client Management and Gateway components in McAfee (now Intel Security) ePO Deep Command (eDC) 2.2 and 2.1 allows authenticated users to execute a command of their choice via dropping a malicious file for the path.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee epo deep command | = 2.1 | No fix listed |
| mcafee epo deep command | = 2.2 | No fix listed |
| intel ePO Deep Command (eDC) | = 2.2 and 2.1 | No fix listed |
References
- kc.mcafee.com patch vendor-advisory