CVE-2020-7278

Published: Apr 15, 2020Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users to allow or block unauthorized traffic via pre-existing rules not being handled correctly when updating to the February 2020 updates.

Affected (7)

Products: Mcafee: Endpoint Security

Mcafee

1 product

Endpoint Security

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Mcafee Endpoint Security	Version 10.5.0
Mcafee Endpoint Security	Version 10.5.1
Mcafee Endpoint Security	Version 10.5.2
Mcafee Endpoint Security	Version 10.5.3
Mcafee Endpoint Security	Version 10.5.4
Mcafee Endpoint Security	Version 10.5.5
Mcafee Endpoint Security	Version 10.6.0

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CWE-862

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10309

Source: trellixpsirt@trellix.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10309

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.