McAfee Change Control vulnerabilities

3 CVEs affecting McAfee Change Control, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-7461, published 2017-03-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-4593, published 2012-08-22. Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days. McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users…
CVE-2013-7461, published 2017-03-14. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write…
CVE-2013-7460, published 2017-03-14. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part…