Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in McAfee Agent ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen oder Dateien zu manipulieren.
Product
McAfee Agent ist eine Client-seitige Komponente, die zur Kommunikation zwischen McAfee ePolicy Orchestrator und den verwalteten Produkten dient.
Vulnerabilities 3
-
High 8.4
SQL injection vulnerability in McAfee Agent's ePO extension
A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution …
-
High 7.8
Improper Privilege Management in McAfee Agent for Windows
A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain system privileges through running the repair functionality. Temporary file actions were performed on the local user's %TEMP% directory with …
-
Medium 6.1CVE-2022-1257 Public exploit
Improper Verification of Cryptographic Signature by McAfee Agent
Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database fil…
Revision history
-
#2
Exploit für CVE-2022-1257 aufgenommen
-
#1
Initiale Fassung
References
-
McAfee Security Bulletin SB10382 vom 2022-04-13
https://kc.mcafee.com/corporate/index?page=content&id=SB10382
-
Exploit DB #52345 vom 2025-06-26
https://www.exploit-db.com/exploits/52345