8.8

CVE-2020-7267

Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

Data is provided by the National Vulnerability Database (NVD)
Mcafee ≫ Virusscan Enterprise Version8.8 Update- SwPlatformwindows
Mcafee ≫ Virusscan Enterprise Version8.8 Updatepatch1 SwPlatformwindows
Mcafee ≫ Virusscan Enterprise Version8.8 Updatepatch10 SwPlatformwindows
Mcafee ≫ Virusscan Enterprise Version8.8 Updatepatch11 SwPlatformwindows
Mcafee ≫ Virusscan Enterprise Version8.8 Updatepatch12 SwPlatformwindows
Mcafee ≫ Virusscan Enterprise Version8.8 Updatepatch13 SwPlatformwindows
Mcafee ≫ Virusscan Enterprise Version8.8 Updatepatch2 SwPlatformwindows
Mcafee ≫ Virusscan Enterprise Version8.8 Updatepatch3 SwPlatformwindows
Mcafee ≫ Virusscan Enterprise Version8.8 Updatepatch4 SwPlatformwindows
Mcafee ≫ Virusscan Enterprise Version8.8 Updatepatch5 SwPlatformwindows
Mcafee ≫ Virusscan Enterprise Version8.8 Updatepatch6 SwPlatformwindows
Mcafee ≫ Virusscan Enterprise Version8.8 Updatepatch7 SwPlatformwindows
Mcafee ≫ Virusscan Enterprise Version8.8 Updatepatch8 SwPlatformwindows
Mcafee ≫ Virusscan Enterprise Version8.8 Updatepatch9 SwPlatformwindows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.066
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.4 2 5.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
nvd@nist.gov 3.6 3.9 4.9
AV:L/AC:L/Au:N/C:N/I:P/A:P
trellixpsirt@trellix.com 8.8 2 6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

CWE-274 Improper Handling of Insufficient Privileges

The product does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.