CVE-2022-1256: Improper Privilege Management in McAfee Agent for Windows
Published Apr 14, 2022
·Updated
A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain system privileges through running the repair functionality. Temporary file actions were performed on the local user's %TEMP% directory with System privileges through manipulation of symbolic links.
Affected Software
1 affected component
McAfee Agent Windows<5.7.6
Event History
Apr 14, 2022
CVE Published
via MITRE·01:45 PM
Data Sourced
via MITRE·01:45 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-1256?
CVE-2022-1256 is a local privilege escalation vulnerability in MA for Windows prior to version 5.7.6.
2
How does CVE-2022-1256 impact users?
CVE-2022-1256 allows a local low privileged user to gain system privileges through running the repair functionality in MA for Windows.
3
What is the severity of CVE-2022-1256?
CVE-2022-1256 has a severity value of 7.8 (high).
4
Which software versions are affected by CVE-2022-1256?
CVE-2022-1256 affects MA for Windows versions prior to 5.7.6.
5
How can CVE-2022-1256 be fixed?
To fix CVE-2022-1256, users should update to version 5.7.6 or later of MA for Windows.