8.4

CVE-2020-7257

Privilege escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links whilst an anti-virus scan was in progress. This is timing dependent.

Data is provided by the National Vulnerability Database (NVD)
Mcafee ≫ Endpoint Security Version10.5.0 SwPlatformwindows
Mcafee ≫ Endpoint Security Version10.5.1 SwPlatformwindows
Mcafee ≫ Endpoint Security Version10.5.2 SwPlatformwindows
Mcafee ≫ Endpoint Security Version10.5.3 SwPlatformwindows
Mcafee ≫ Endpoint Security Version10.5.4 SwPlatformwindows
Mcafee ≫ Endpoint Security Version10.5.5 SwPlatformwindows
Mcafee ≫ Endpoint Security Version10.6.0 SwPlatformwindows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.14% 0.342
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.3 1 5.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
nvd@nist.gov 3.3 3.4 4.9
AV:L/AC:M/Au:N/C:N/I:P/A:P
trellixpsirt@trellix.com 8.4 2 5.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.