CVE-2020-7263

Published: Apr 1, 2020Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import.

Affected (9)

Products: Mcafee: Endpoint Security

Mcafee

1 product

Endpoint Security

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Mcafee Endpoint Security	Version 10.5.0
Mcafee Endpoint Security	Version 10.5.1
Mcafee Endpoint Security	Version 10.5.2
Mcafee Endpoint Security	Version 10.5.3
Mcafee Endpoint Security	Version 10.5.4
Mcafee Endpoint Security	Version 10.5.5
Mcafee Endpoint Security	Version 10.6.0
Mcafee Endpoint Security	Version 10.6.1
Mcafee Endpoint Security	Version 10.7.0

Related CWEs

CWE-264

CWE-732

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10314

Source: trellixpsirt@trellix.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10314

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.