What is CVE-2017-3912?

CVE-2017-3912 is a medium-severity vulnerability in Mcafee Application And Change Control, classified under Improper Handling of Insufficient Privileges. CVSS score: 4.4/10. Published 2018-09-18.

How severe is CVE-2017-3912?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Auth bypass in Mcafee Application And Change Control

CVE-2017-3912

Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility.

EPSS: 0.004 (33.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N.

Affected products

Mcafee Application_and_change_control — versions 6.2.0, 7.0.1
Mcafee Application Control And Change (Macc) — versions 7.0.1, 6.2.0

Weakness classification (CWE)

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)
trellixpsirt@trellix.com (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2017-3912?: CVE-2017-3912 is a medium-severity vulnerability in Mcafee Application And Change Control, classified under Improper Handling of Insufficient Privileges. CVSS score: 4.4/10. Published 2018-09-18.
How severe is CVE-2017-3912?: Medium severity. CVSS v3 base score is 4.4 out of 10.