CVE-2012-4593

Published: Aug 22, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users to bypass authentication by executing a command.

Affected (8)

Products: Mcafee: Application Control, Change Control

Mcafee

2 products

Application Control

Change Control

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Mcafee Application Control	Version 5.1.0
Mcafee Application Control	Version 5.1.1
Mcafee Application Control	Version 5.1.2
Mcafee Application Control	Version 6.0.0
Mcafee Change Control	Version 5.1.0
Mcafee Change Control	Version 5.1.1
Mcafee Change Control	Version 5.1.2
Mcafee Change Control	Version 6.0.0

Related CWEs

CWE-264

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10023

Source: cve@mitre.org

Vendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10023

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.