Lucene search

K
cvelistTrellixCVELIST:CVE-2020-7281
HistoryJul 03, 2020 - 1:25 p.m.

CVE-2020-7281 Privilege Escalation vulnerability in McAfee Total Protection (MTP)

2020-07-0313:25:21
CWE-269
trellix
www.cve.org
3

CVSS3

7.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

5.1%

Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

CNA Affected

[
  {
    "product": "McAfee Total Protection (MTP)",
    "vendor": "McAfee,LLC",
    "versions": [
      {
        "status": "affected",
        "version": "16.0.R26"
      }
    ]
  }
]

CVSS3

7.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVELIST:CVE-2020-7281