CVE-2022-0815
Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behaviors including; settings being changed, fingerprinting of the system leading to targeted scams, and not triggering the malicious software if McAfee software is detected.
- Score
- CVSS 3.1 7.3 High
- Status
- Modified - trellixpsirt@trellix.com
- Published
- 2022-03-10
- Last modified
- 2024-08-02
- Weaknesses
- CWE-668
Affected products
References
- https://service.mcafee.com/?articleId=TS103273&page=shell&shell=article-view