CVE-2017-3912CWE-274

McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass

Medium · published September 18, 2018

CVSS v3.0
4.4
EPSS
0%
Percentile
34.5
In the wild
Unconfirmed
What it is

Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility.

The record
Technical detail
CVSS v3.0
4.4 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.5th percentile
Weakness
CWE-274 · Improper Handling of Insufficient Privileges
Published
2018-09-18T22:00Z
EPSS history
Timeline
  • 18 SEP 22:00Z
    McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass
    cvelistv5