CVE-2021-31833 : Security Advisory and Response

A locally logged-in attacker could exploit a vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 to bypass application solidification protection.

Understanding CVE-2021-31833

This CVE identifies a potential security bypass vulnerability in McAfee Application and Change Control (MACC) before version 8.3.4.

What is CVE-2021-31833?

The vulnerability allows a locally logged-in attacker to circumvent the application solidification protection provided by MACC, enabling them to run applications usually blocked by MACC. The attacker must rename a specified binary to match a configured updater's name and follow specific steps to run the renamed binary.

The Impact of CVE-2021-31833

The vulnerability's base severity is rated as HIGH with a CVSS base score of 7.1. It has a low attack complexity, requires low privileges, and has a high integrity impact. The vulnerability could lead to unauthorized application execution.

Technical Details of CVE-2021-31833

This section provides detailed technical information about the vulnerability.

Vulnerability Description

The vulnerability in McAfee Application and Change Control (MACC) allows a locally logged-in attacker to run unauthorized applications.

Affected Systems and Versions

McAfee Application and Change Control (MACC) versions prior to 8.3.4 are affected by this vulnerability.

Exploitation Mechanism

To exploit this vulnerability, the attacker needs to rename a specified binary to match a configured updater's name and follow specific steps.

Mitigation and Prevention

Here's what you can do to mitigate the risks associated with CVE-2021-31833.

Immediate Steps to Take

Ensure your McAfee Application and Change Control (MACC) is updated to version 8.3.4 or later. Monitor for any unauthorized application executions.

Long-Term Security Practices

Practice the principle of least privilege to restrict access rights for users and applications. Regularly update security patches and monitor for security advisories.

Patching and Updates

Apply security patches promptly, and keep McAfee Application and Change Control (MACC) up to date to address known vulnerabilities.