7.8

CVE-2019-3585

VSE Escalation of Privileges through Alert pop-up window

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with elevated privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mcafee ≫ Virusscan Enterprise Version 8.8 Update - SwPlatform windows
Mcafee ≫ Virusscan Enterprise Version 8.8 Update patch1 SwPlatform windows
Mcafee ≫ Virusscan Enterprise Version 8.8 Update patch10 SwPlatform windows
Mcafee ≫ Virusscan Enterprise Version 8.8 Update patch11 SwPlatform windows
Mcafee ≫ Virusscan Enterprise Version 8.8 Update patch12 SwPlatform windows
Mcafee ≫ Virusscan Enterprise Version 8.8 Update patch13 SwPlatform windows
Mcafee ≫ Virusscan Enterprise Version 8.8 Update patch2 SwPlatform windows
Mcafee ≫ Virusscan Enterprise Version 8.8 Update patch3 SwPlatform windows
Mcafee ≫ Virusscan Enterprise Version 8.8 Update patch4 SwPlatform windows
Mcafee ≫ Virusscan Enterprise Version 8.8 Update patch5 SwPlatform windows
Mcafee ≫ Virusscan Enterprise Version 8.8 Update patch6 SwPlatform windows
Mcafee ≫ Virusscan Enterprise Version 8.8 Update patch7 SwPlatform windows
Mcafee ≫ Virusscan Enterprise Version 8.8 Update patch8 SwPlatform windows
Mcafee ≫ Virusscan Enterprise Version 8.8 Update patch9 SwPlatform windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.198
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Trellix 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://kc.mcafee.com/corporate/index?page=content&id=SB10302