VULNERABILITY INTELLIGENCE
CVE-2017-3912
CVSS score4.4 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2018-09-18
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Description
Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility.
Weakness classification
- CWE-274: Improper Handling of Insufficient Privileges
- CWE-287: Improper Authentication