PT-2018-2692 · Mcafee · Mcafee Application/Change Control

Publicado 2018-12-16 · Atualizado 2019-10-09 · CVE-2018-6669

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Application Control / Change Control version 7.0.1 and earlier

Description The issue is related to a whitelist bypass, allowing a remote or local user to execute blacklisted files. This is due to errors in the implementation of the blacklist mechanism. Exploitation of this issue may enable an attacker to bypass existing restrictions on file execution and execute arbitrary code.

Recommendations For McAfee Application Control / Change Control version 7.0.1 and earlier, consider restricting access to ASP.NET forms until a patch is available. As a temporary workaround, review and strengthen the implementation of the blacklist mechanism to prevent the execution of blacklisted files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-592

CWE-425

Identificadores relacionados

BDU:2019-01360

CVE-2018-6669

Produtos afetados

Mcafee Application/Change Control

Referências · 7

• https://kc.mcafee.com/corporate/index?page=content&id=SB10261 · Nota
• https://osv.dev/vulnerability/CVE-2018-6669 · Aviso do Fabricante
• https://securityfocus.com/bid/106282/info · Nota
• https://bdu.fstec.ru/vul/2019-01360 · Nota de Segurança
• https://kc.mcafee.com/corporate/index?page=content&id=SB10261 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-6669 · Nota de Segurança
• http://securityfocus.com/bid/106282 · Nota