PT-2018-2782 · Mcafee · Mcafee Virusscan Enterprise
Published
2018-05-25
·
Updated
2019-10-03
·
CVE-2018-6674
CVSS v3.1
6.8
Medium
| Vector | AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
McAfee VirusScan Enterprise version 8.8 prior to Patch 13
Description
The issue concerns a privilege escalation problem in McAfee VirusScan Enterprise, where local users can spawn unrelated processes with elevated privileges if the system administrator grants McTray.exe elevated privileges. This is possible because, by default, McTray.exe runs with the current user's privileges. The vulnerability is also related to insufficient access control, which could allow an attacker to view configuration information in text format using the graphical user interface.
Recommendations
For McAfee VirusScan Enterprise version 8.8 prior to Patch 13, apply Patch 13 to resolve the issue. As a temporary workaround, consider restricting the privileges granted to McTray.exe to prevent exploitation. Avoid granting McTray.exe elevated privileges unless necessary, and ensure that access to configuration information is properly restricted to authorized users.
Fix
Missing Encryption of Sensitive Data
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Mcafee Virusscan Enterprise