CVE-2018-6669 Bypass Application Control through an ASP.NET form
HighCVSS 8.0
EPSS 0.54%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows a remote or local user to execute blacklisted files through an ASP.NET form.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee application change control | <= 7.0.1 | No fix listed |
| mcafee application and change control | >= 7.0.1, <= 7.0.1 | No fix listed |
References
- 106282 vdb-entry
- kc.mcafee.com