CVE-2013-7460 — Improper Access Control in Application Control

CWE-284 — Improper Access Control3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 88.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mcafee Application ControlMcafee Change ControlIntel Application Control
Timeline
PublishedMar 14
Latest updateMay 17

Description

A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5intel/application_control6.1.0 for Linux and earlier

Patches

Patch: kc.mcafee.com ↗Patch: kc.mcafee.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-jrv7-j2hm-r7h8: A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6↗2022-05-17
▶
CVEList
CVE-2013-7460: A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6↗2017-03-14
▶
CVE-2013-7460 — Improper Access Control in Mcafee | cvebase