PT-2017-7518 · Mcafee · Mcafee Agent

Publicado 2017-03-14 · Atualizado 2017-03-23 · CVE-2015-8987

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions McAfee Agent versions 4.8.0 patch 2 and earlier

Description The issue allows for a man-in-the-middle (MitM) attack, where attackers can make a McAfee Agent communicate with a different, possibly rogue, ePO server by migrating the McAfee Agent to another ePO server.

Recommendations For McAfee Agent versions 4.8.0 patch 2 and earlier, update to a version later than 4.8.0 patch 2 to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2015-8987

Produtos afetados

Mcafee Agent

Referências · 2

• https://kc.mcafee.com/corporate/index?page=content&id=SB10101 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-8987 · Nota de Segurança