CVE-2018-6690: McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC
Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-6690?
CVE-2018-6690 is considered a high severity vulnerability due to its potential for unauthorized code execution.
How do I fix CVE-2018-6690?
To fix CVE-2018-6690, upgrade to McAfee Application and Change Control version 8.0.0 Hotfix 5 or later.
What versions of McAfee Application and Change Control are affected by CVE-2018-6690?
CVE-2018-6690 affects versions 7.0.2 and earlier, as well as 8.0.0 through Hotfix 4.
What kind of attacks can CVE-2018-6690 enable?
CVE-2018-6690 can enable attackers to execute arbitrary code via unauthorized file transfers by authenticated users.
Is Microsoft Windows itself vulnerable in the context of CVE-2018-6690?
Microsoft Windows is not directly vulnerable in the context of CVE-2018-6690; the vulnerability lies within McAfee Application and Change Control.