Lucene search

TrellixCVE-2020-7334

HistoryOct 15, 2020 - 9:15 a.m.

CVE-2020-7334

2020-10-1509:15:11

CWE-269

CWE-266

trellix

web.nvd.nist.gov

cve-2020-7334

vulnerability

mcafee

application control

change control

privilege

msi

installation

uninstallation

security

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

Percentile

12.6%

JSON

Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2 allows local administrators to change or update the configuration settings via a carefully constructed MSI configured to mimic the genuine installer. This version adds further controls for installation/uninstallation of software.

Affected configurations

Nvd

Node

mcafeeapplication_and_change_controlRange<8.3.2

VendorProductVersionCPE
mcafeeapplication_and_change_control*cpe:2.3:a:mcafee:application_and_change_control:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mcafee	application_and_change_control	*	cpe:2.3:a:mcafee:application_and_change_control::::::::

CNA Affected

[
  {
    "product": "McAfee Application and Change Control (MACC)",
    "vendor": "McAfee,LLC",
    "versions": [
      {
        "lessThan": "8.3.2",
        "status": "affected",
        "version": "8.x",
        "versionType": "custom"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10333

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2020-7334