Application And Change Control

application_and_change_control

Vendor: Mcafee • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-0221 1Mcafee 1Application And Change Control Jun 17, 2026 Jan 13, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program.
CVE-2021-31833 1Mcafee 1Application And Change Control Jun 17, 2026 Jan 4, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidification protection provided...Show more Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidification protection provided by MACC, permitting them to run applications that would usually be prevented by MACC. This would require the attacker to rename the specified binary to match name of any configured updater and perform a specific set of steps, resulting in the renamed binary to be to run.Show less
CVE-2020-7334 1Mcafee 1Application And Change Control Jun 17, 2026 Oct 15, 2020 N/A· v4 8.2 HIGH· v3 4.6 MEDIUM· v2 Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2 allows local administrators to change or update the configuration settings via a carefully construc...Show more Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2 allows local administrators to change or update the configuration settings via a carefully constructed MSI configured to mimic the genuine installer. This version adds further controls for installation/uninstallation of software.Show less
CVE-2020-7309 1Mcafee 1Application And Change Control Jun 17, 2026 Aug 26, 2020 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery sect...Show more Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section.Show less
CVE-2020-7260 1Mcafee 1Application And Change Control Jun 17, 2026 Mar 26, 2020 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder.
CVE-2017-3912 1Mcafee 1Application And Change Control Nov 21, 2024 Sep 18, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility.