application_and_change_control Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/application_and_change_control/ Sun, 26 Feb 2023 06:43:02 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png application_and_change_control Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/application_and_change_control/ 32 32 CVE-2020-7334 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7334/ Sun, 26 Feb 2023 06:43:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7334/ Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2 allows local administrators to change or update the configuration settings via a carefully constructed MSI configured to mimic the genuine installer. This version adds further controls for installation/uninstallation of software.

The post CVE-2020-7334 appeared first on CVE Vulnerability.

]]> Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2 allows local administrators to change or update the configuration settings via a carefully constructed MSI configured to mimic the genuine installer. This version adds further controls for installation/uninstallation of software.

The post CVE-2020-7334 appeared first on CVE Vulnerability.

]]> CVE-2020-7309 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7309/ Sun, 26 Feb 2023 06:43:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7309/ Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section.

The post CVE-2020-7309 appeared first on CVE Vulnerability.

]]> Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section.

The post CVE-2020-7309 appeared first on CVE Vulnerability.

]]> CVE-2020-7260 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7260/ Sun, 26 Feb 2023 06:43:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7260/ DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder.

The post CVE-2020-7260 appeared first on CVE Vulnerability.

]]> DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder.

The post CVE-2020-7260 appeared first on CVE Vulnerability.

]]> CVE-2021-31833 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-31833/ Thu, 23 Feb 2023 14:09:39 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-31833/ Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidification protection provided by MACC, permitting them to run applications that would usually be prevented by MACC. This would require the attacker to rename the specified binary to match […]

The post CVE-2021-31833 appeared first on CVE Vulnerability.

]]> Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidification protection provided by MACC, permitting them to run applications that would usually be prevented by MACC. This would require the attacker to rename the specified binary to match name of any configured updater and perform a specific set of steps, resulting in the renamed binary to be to run.

The post CVE-2021-31833 appeared first on CVE Vulnerability.

]]> CVE-2023-0221 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0221/ Wed, 22 Feb 2023 14:02:12 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0221 Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program.

The post CVE-2023-0221 appeared first on CVE Vulnerability.

]]> Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program.

The post CVE-2023-0221 appeared first on CVE Vulnerability.

]]>