PT-2020-3139 · Mcafee · Mcafee Virusscan Enterprise

Published 2020-06-09 · Updated 2021-10-19 · CVE-2019-3585

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions 8.8 prior to Patch 14

Description The issue is related to a Privilege Escalation vulnerability in the McTray.exe file of McAfee VirusScan Enterprise. This vulnerability may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges by running McAfee Tray with elevated privileges. The vulnerability is associated with insufficient access control.

Recommendations For McAfee VirusScan Enterprise version 8.8 prior to Patch 14, apply Patch 14 to resolve the issue. As a temporary workaround, consider restricting the use of the McTray.exe file to minimize the risk of exploitation. Avoid running McAfee Tray with elevated privileges until the issue is resolved.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-264

Related Identifiers

BDU:2020-03433

CVE-2019-3585

Affected Products

Mcafee Virusscan Enterprise

References · 8

• https://bdu.fstec.ru/vul/2020-03433 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3585 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3585 · Security Note
• https://t.me/cibsecurity/12642 · Telegram Post
• https://t.me/cvenotify/4273 · Telegram Post
• https://kc.mcafee.com/corporate/index?page=content&id=SB10302 · Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10302 · Note
• https://securitylab.ru/vulnerability/509231.php · Note