CVEvulnerability

CVE-2016-3984

5.1 MEDIUM Published 2016-04-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-04-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.1 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-284

Description

The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL) before 2.0.1.140.1, Data Loss Prevention Endpoint (DLPe) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Device Control (MDC) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Endpoint Security (ENS) 10.x before 10.1, Host Intrusion Prevention Service (IPS) 8.0 before 8.0.0.3624, and VirusScan Enterprise (VSE) 8.8 before P7 (8.8.0.1528) on Windows allows local administrators to bypass intended self-protection rules and disable the antivirus engine by modifying registry keys.

Affected configurations

• mcafee active response (<= 1.1.0.158) • mcafee agent (<= 5.0.2.285) • mcafee data exchange layer (<= 2.0.0.430.1) • mcafee data loss prevention endpoint (<= 9.3.0) • mcafee data loss prevention endpoint (<= 9.4.0) • mcafee endpoint security (<= 10.0.1) • mcafee host intrusion prevention (<= 8.0.0) • mcafee virusscan enterprise (<= 8.8.0)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References