cvelist/2018/6xxx/CVE-2018-6674.json

{
   "CVE_data_meta" : {
      "ASSIGNER" : "psirt@mcafee.com",
      "DATE_PUBLIC" : "2018-05-09T17:00:00.000Z",
      "ID" : "CVE-2018-6674",
      "STATE" : "PUBLIC",
      "TITLE" : "SB10237 -  VirusScan Enterprise (VSE) - Privilege Escalation vulnerability"
   },
   "affects" : {
      "vendor" : {
         "vendor_data" : [
            {
               "product" : {
                  "product_data" : [
                     {
                        "product_name" : " VirusScan Enterprise (VSE)",
                        "version" : {
                           "version_data" : [
                              {
                                 "affected" : "<",
                                 "platform" : "x86",
                                 "version_name" : "8.8",
                                 "version_value" : "8.8 Patch 11"
                              }
                           ]
                        }
                     }
                  ]
               },
               "vendor_name" : "McAfee"
            }
         ]
      }
   },
   "data_format" : "MITRE",
   "data_type" : "CVE",
   "data_version" : "4.0",
   "description" : {
      "description_data" : [
         {
            "lang" : "eng",
            "value" : "Privilege Escalation vulnerability in Microsoft Windows client in McAfee VirusScan Enterprise (VSE) 8.8 allows local users to view configuration information in plain text format via the GUI or GUI terminal commands."
         }
      ]
   },
   "impact" : {
      "cvss" : {
         "attackComplexity" : "HIGH",
         "attackVector" : "PHYSICAL",
         "availabilityImpact" : "HIGH",
         "baseScore" : 6.8,
         "baseSeverity" : "MEDIUM",
         "confidentialityImpact" : "HIGH",
         "integrityImpact" : "HIGH",
         "privilegesRequired" : "HIGH",
         "scope" : "CHANGED",
         "userInteraction" : "REQUIRED",
         "vectorString" : "CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
         "version" : "3.0"
      }
   },
   "problemtype" : {
      "problemtype_data" : [
         {
            "description" : [
               {
                  "lang" : "eng",
                  "value" : "Privilege Escalation vulnerability"
               }
            ]
         }
      ]
   },
   "references" : {
      "reference_data" : [
         {
            "name" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10237",
            "refsource" : "CONFIRM",
            "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10237"
         },
         {
            "name" : "104180",
            "refsource" : "BID",
            "url" : "http://www.securityfocus.com/bid/104180"
         },
         {
            "name" : "1040893",
            "refsource" : "SECTRACK",
            "url" : "http://www.securitytracker.com/id/1040893"
         }
      ]
   },
   "source" : {
      "advisory" : "SB10237",
      "discovery" : "EXTERNAL"
   }
}