CVE-2021-31833 HIGH

CVE-2021-31833

Vendor Mcafee,Llc
Product McAfee Application and Change Control (MACC)
Weakness CWE-269
Published January 4, 2022
Last update August 3, 2024

CVSS base score

7.1/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

What the vulnerability does

01Description

Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidification protection provided by MACC, permitting them to run applications that would usually be prevented by MACC. This would require the attacker to rename the specified binary to match name of any configured updater and perform a specific set of steps, resulting in the renamed binary to be to run.

Key dates

02Disclosure timeline

January 4, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE