PT-2018-2692 · Mcafee · Mcafee Application/Change Control

Published 2018-12-16 · Updated 2019-10-09 · CVE-2018-6669

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Application Control / Change Control version 7.0.1 and earlier

Description The issue is related to a whitelist bypass, allowing a remote or local user to execute blacklisted files. This is due to errors in the implementation of the blacklist mechanism. Exploitation of this issue may enable an attacker to bypass existing restrictions on file execution and execute arbitrary code.

Recommendations For McAfee Application Control / Change Control version 7.0.1 and earlier, consider restricting access to ASP.NET forms until a patch is available. As a temporary workaround, review and strengthen the implementation of the blacklist mechanism to prevent the execution of blacklisted files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-592

CWE-425

Related Identifiers

BDU:2019-01360

CVE-2018-6669

Affected Products

Mcafee Application/Change Control

References · 7

• https://osv.dev/vulnerability/CVE-2018-6669 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01360 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-6669 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10261 · Note
• https://securityfocus.com/bid/106282/info · Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10261 · Note
• http://securityfocus.com/bid/106282 · Note