CVE-2009-5115

https://notcve.org/view.php?id=CVE-2009-5115

McAfee Common Management Agent (CMA) 3.5.5 through 3.5.5.588 and 3.6.0 through 3.6.0.608, and McAfee Agent 4.0 before Patch 3, allows remote authenticated users to overwrite arbitrary files by accessing a report-writing ActiveX control COM object. McAfee Common Management Agent (CMA) v3.5.5 hasta v3.5.5.588 y v3.6.0 hasta v3.6.0.608, y McAfee Agent v4.0 anteriores a Patch 3, permite a usuarios remotos autentificados a sobreescribir ficheros accediendo al objeto COM que es un control ActiveX (report-writing ). • https://exchange.xforce.ibmcloud.com/vulnerabilities/78446 https://kc.mcafee.com/corporate/index?page=content&id=SB10002 • CWE-264: Permissions, Privileges, and Access Controls •