Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-0815 EUVD-2022-15865GHSA-qvxp-wqpj-8gwf

McAfee WebAdvisor - Extension Fingerprinting vulnerability

Published Mar 10, 2022 · Updated Aug 2, 2024 · Assigned by trellix

Description

Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behaviors including; settings being changed, fingerprinting of the system leading to targeted scams, and not triggering the malicious software if McAfee software is detected.

Affected products

VendorProductAffectedFixed
McAfee McAfee WebAdvisor unspecified – ≤ 8.1.0.1895 —

References