title: McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass
description: Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility.
problem types: Privilege Escalation (CWE-274)
affected:
{
platforms: x86
product: McAfee Application Control and Change Control (MACC)
vendor: McAfee
versions:
status: affected, version: 7.0.1
}
{
product: McAfee Application Control and Change Control (MACC)
vendor: McAfee
versions:
status: affected, version: 6.2.0
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
version: 3.0
]