PT-2015-6373 · Microsoft+1 · Windows+1

Published 2015-05-14 · Updated 2019-02-11 · CVE-2015-3987

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee ePO Deep Command versions 2.1 through 2.2 before HF 1058831

Description The issue concerns unquoted Windows search path vulnerabilities in the Client Management and Gateway components. This could allow local users to gain privileges via unspecified vectors.

Recommendations For McAfee ePO Deep Command versions 2.1 through 2.2, apply Hotfix 1058831 to resolve the issue.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2015-3987

Affected Products

Mcafee Epo Deep Command

Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-3987 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10115 · Vendor Advisory
• http://securityfocus.com/bid/74685 · Note
• http://securitytracker.com/id/1032244 · Note