CVE-2022-0815

Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behaviors including; settings being changed, fingerprinting of the system leading to targeted scams, and not triggering the malicious software if McAfee software is detected.

Score
CVSS 3.1 7.3 High
Status
Modified - trellixpsirt@trellix.com
Published
2022-03-10
Last modified
2024-08-02
Weaknesses
CWE-668

Affected products

References