CVE-2012-4593 Auth bypass in n/a
Local attackers can bypass authentication in McAfee Application Control by exploiting password file attribute handling flaws.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-4593?
CVE-2012-4593 is a medium-severity authentication bypass vulnerability in n/a, published on 22 Aug 2012. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users to bypass authentication by executing a command.
Weakness: CWE-264
Which versions are affected by CVE-2012-4593?
It affects 2 products.
Products include Mcafee Application Control, Mcafee Change Control.
How do I fix CVE-2012-4593?
No fix has been published for CVE-2012-4593 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2012-4593 being exploited?
There is no known exploitation of CVE-2012-4593 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2016-8009 Privilege escalation in McAfee Application Control (MAC)
- CVE-2016-8010 Security feature bypass in McAfee Application Control (MAC)
- CVE-2016-1715 Memory corruption in n/a
- CVE-2014-9920 Security feature bypass in McAfee Application Control (MAC)
- CVE-2013-7460 Security feature bypass in Application Control (MAC)
Sources
Also known as GHSA-v588-9f3r-74vj.