CVE-2012-4593
Summary
| CVE | CVE-2012-4593 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-08-22 10:42:00 UTC |
| Updated | 2012-08-22 10:42:00 UTC |
| Description | McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users to bypass authentication by executing a command. |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mcafee | Application Control | 5.1.0 | All | All | All |
| Application | Mcafee | Application Control | 5.1.1 | All | All | All |
| Application | Mcafee | Application Control | 5.1.2 | All | All | All |
| Application | Mcafee | Application Control | 6.0.0 | All | All | All |
| Application | Mcafee | Application Control | 5.1.0 | All | All | All |
| Application | Mcafee | Application Control | 5.1.1 | All | All | All |
| Application | Mcafee | Application Control | 5.1.2 | All | All | All |
| Application | Mcafee | Application Control | 6.0.0 | All | All | All |
| Application | Mcafee | Change Control | 5.1.0 | All | All | All |
| Application | Mcafee | Change Control | 5.1.1 | All | All | All |
| Application | Mcafee | Change Control | 5.1.2 | All | All | All |
| Application | Mcafee | Change Control | 6.0.0 | All | All | All |
| Application | Mcafee | Change Control | 5.1.0 | All | All | All |
| Application | Mcafee | Change Control | 5.1.1 | All | All | All |
| Application | Mcafee | Change Control | 5.1.2 | All | All | All |
| Application | Mcafee | Change Control | 6.0.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| McAfee KnowledgeBase - McAfee Security Bulletin - McAfee Application Control / Change Control update fixes password bypass issue | CONFIRM | kc.mcafee.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.