Vulnerability in Mcafee Epo Deep Command

CVE-2015-3987

Multiple unquoted Windows search path vulnerabilities in the (1) Client Management and (2) Gateway in McAfee ePO Deep Command 2.1 and 2.2 before HF 1058831 allow local users to gain privileges via unspecified vectors.

EPSS: 0.005 (38.3th percentile) — read the EPSS interpretation.

Affected products

Mcafee Epo_deep_command — versions 2.1, 2.2
N/a — versions n/a

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

References

cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)