Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only exploitable in a small time window.

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

特权管理不恰当

McAfee Total Protection (MTP) 安全漏洞

Mcafee McAfee Total Protection（MTP）是美国迈克菲（Mcafee）公司的一套防病毒软件。 McAfee Total Protection (MTP) 16.0.29之前版本存在安全漏洞，该漏洞源于允许本地用户通过创建一个连接链接来小心操作一个文件夹来获得更高的特权。这利用了由于时间问题而缺乏保护的缺点，并且只能在很小的时间窗口中利用。

N/A

N/A