Vulnerability · Published Sep 9, 2020 · Assigned by trellix
CVE-2020-7325Privilege Escalation vulnerability in MVISION Endpoint
Medium 5.5
In plain English
A medium-severity security flaw in MVISION Endpoint from McAfee LLC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.3%top 74.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| McAfee LLC | MVISION Endpoint | 20.x – before 20.9 |
Weakness: CWE-59 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10328 x_refsource_CONFIRM