Skip to content
OpenAdvisories
High · 7.8 CVE-2022-1256 EUVD-2022-24589GHSA-qqm3-6f5j-2j3h

Improper Privilege Management in McAfee Agent for Windows

Published Apr 14, 2022 · Updated Aug 2, 2024 · Assigned by trellix

Description

A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain system privileges through running the repair functionality. Temporary file actions were performed on the local user's %TEMP% directory with System privileges through manipulation of symbolic links.

Affected products

VendorProductAffectedFixed
McAfee,LLC McAfee Agent for Windows unspecified – < 5.7.6 5.7.6

Advisories 1

References