Vulnerability · Published Jun 10, 2020 · Assigned by trellix
CVE-2020-7280Symbolic Link vulnerability during DAT update
High 7.8
In plain English
A high-severity privilege mismanagement in McAfee VirusScan Enterprise (VSE) from McAfee, LLC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.4%top 65.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing dependent.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| McAfee, LLC | McAfee VirusScan Enterprise (VSE) | 8.8.x – before 8.8 Patch 15 |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10302 x_refsource_CONFIRM
- https://www.zerodayinitiative.com/advisories/ZDI-20-702/ x_refsource_MISC