A security issue has been reported in McAfee Application Control / Change Control, which can be exploited by malicious, local users to bypass certain security restrictions.

The security issue is caused due to a user being able to change the file permissions for the "solidcore\passwd" file to read-only, which overrides the feature prompting a user for a password before running a password-protected command.

The security issue is reported in versions 5.1.0, 5.1.1, 5.1.2, and 6.0.0.

Solution
Apply hotfixes.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Sebastian Obermeier, ABB Corporate Research.

Original Advisory
McAfee:
https://kc.mcafee.com/corporate/index?page=content&id=SB10023

Deep Links
Links available to Secunia VIM customers