CVE-2012-4593

McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users to bypass authentication by executing a command.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2012-08-22

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Application Control (Mcafee)
• Change Control (Mcafee)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10023