PT-2017-9457 · Mcafee · Mcafee Host Intrusion Prevention Service

Published 2017-03-14 · Updated 2017-03-23 · CVE-2016-8007

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Host Intrusion Prevention Services (HIPS) versions 8.0 Patch 7 and earlier

Description The issue allows authenticated users to bypass authentication and manipulate the product's registry keys under specific conditions.

Recommendations For McAfee Host Intrusion Prevention Services (HIPS) versions 8.0 Patch 7 and earlier, update to a version later than 8.0 Patch 7 to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2016-8007

Affected Products

Mcafee Host Intrusion Prevention Service

References · 4

• https://osv.dev/vulnerability/CVE-2016-8007 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8007 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10173 · Vendor Advisory
• http://securityfocus.com/bid/93813 · Note