CVE-2016-8010

Published: Mar 14, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Application protections bypass vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and earlier and Endpoint Security (ENS) 10.2 and earlier allows local users to bypass local security protection via a command-line utility.

Affected (2)

Products: Mcafee: Application Control, Endpoint Security

Mcafee

2 products

Application Control

Endpoint Security

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mcafee Application Control	Up to 7.0.0
Mcafee Endpoint Security	Up to 10.2

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

http://www.securityfocus.com/bid/94661

Source: secure@intel.com

Third Party AdvisoryVDB Entry

https://kc.mcafee.com/corporate/index?page=content&id=SB10179

Source: secure@intel.com

Vendor Advisory

http://www.securityfocus.com/bid/94661

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://kc.mcafee.com/corporate/index?page=content&id=SB10179

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.