Skip to content
OpenAdvisories

Weakness (CWE)

CWE-274: Improper Handling of Insufficient Privileges

Base Draft Mapping discouraged

The product does not handle or incorrectly handles when it has insufficient privileges to perform an operation.

Source: MITRE CWE-274

All Critical High Medium Low Exploited only Public exploit

42 results · Feed

  • Medium 4.4
    CVE-2017-3912

    McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass

    Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility.

    McAfee McAfee Application Control and Change Control (MACC)
  • Medium 6.8
    CVE-2018-6674

    Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges

    Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe el…

    McAfee VirusScan Enterprise (VSE)