Improper privilege management vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local user to modify a configuration file and perform a LOLBin (Living off the land) attack. This could result in the user gaining elevated permissions and being able to execute arbitrary code, through not correctly checking the integrity of the configuration file.
References
| Link | Resource |
|---|---|
| https://service.mcafee.com/?articleId=TS103318&page=shell&shell=article-view | Vendor Advisory |
Configurations
History
16 Nov 2023, 03:14
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://service.mcafee.com/?articleId=TS103318&page=shell&shell=article-view - Vendor Advisory | |
| CWE | NVD-CWE-noinfo |
07 Nov 2023, 03:42
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| References | () https://service.mcafee.com/?articleId=TS103318&page=shell&shell=article-view - |
28 Jun 2022, 18:02
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 4.6
v3 : 7.8 |
| References | (CONFIRM) https://service.mcafee.com/?articleId=TS103318&page=shell&shell=article-view - Vendor Advisory | |
| First Time |
Mcafee consumer Product Removal Tool
Mcafee |
|
| CPE | cpe:2.3:a:mcafee:consumer_product_removal_tool:*:*:*:*:*:*:*:* |
20 Jun 2022, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-06-20 11:15
Updated : 2023-12-10 14:22
NVD link : CVE-2022-1823
Mitre link : CVE-2022-1823
CVE.ORG link : CVE-2022-1823
JSON object : View
Products Affected
mcafee
- consumer_product_removal_tool
CWE