PT-2015-6373 · Microsoft+1 · Windows+1

Publicado 2015-05-14 · Atualizado 2019-02-11 · CVE-2015-3987

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee ePO Deep Command versions 2.1 through 2.2 before HF 1058831

Description The issue concerns unquoted Windows search path vulnerabilities in the Client Management and Gateway components. This could allow local users to gain privileges via unspecified vectors.

Recommendations For McAfee ePO Deep Command versions 2.1 through 2.2, apply Hotfix 1058831 to resolve the issue.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2015-3987

Produtos afetados

Mcafee Epo Deep Command

Windows

Referências · 4

• http://securityfocus.com/bid/74685 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-3987 · Nota de Segurança
• https://kc.mcafee.com/corporate/index?page=content&id=SB10115 · Aviso do Fabricante
• http://securitytracker.com/id/1032244 · Nota