PT-2012-5501 · Mcafee · Mcafee Application/Change Control

Published 2012-08-22 · Updated 2012-08-22 · CVE-2012-4593

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions McAfee Application Control and Change Control versions 5.1.x through 6.0.0

Description The issue allows local users to bypass authentication by executing a command due to the software not enforcing an intended password requirement in certain situations involving attributes of the password file.

Recommendations For versions 5.1.x through 6.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-4593

Affected Products

Mcafee Application/Change Control

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-4593 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10023 · Vendor Advisory