CVE-2013-7461 — Improper Access Control in Application Control

CWE-284 — Improper Access Control3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 88.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mcafee Application ControlMcafee Change ControlIntel Change Control
Timeline
PublishedMar 14
Latest updateMay 17

Description

A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5intel/change_control6.1.0 for Linux and earlier

Patches

Patch: kc.mcafee.com ↗Patch: kc.mcafee.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-w2rf-9386-8f2r: A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6↗2022-05-17
▶
CVEList
CVE-2013-7461: A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6↗2017-03-14
▶
CVE-2013-7461 — Improper Access Control in Mcafee | cvebase