Lucene search
TrellixCVELIST:CVE-2020-7305HistoryAug 13, 2020 - 3:05 a.m.
CVE-2020-7305 DLP ePO extension - Privilege escalation
2020-08-1303:05:15
CWE-269
trellix
www.cve.org
5
mcafee dlp epo
privilege escalation
vulnerability
incorrect validation
rule sets
user credentials
CVSS3
6.7
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
40.2%
Privilege escalation vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials.
CNA Affected
[
{
"product": "DLP ePO extension",
"vendor": "McAfee",
"versions": [
{
"lessThan": "11.3.28",
"status": "affected",
"version": "11.3",
"versionType": "custom"
},
{
"lessThan": "11.4.200",
"status": "affected",
"version": "11.4",
"versionType": "custom"
},
{
"lessThan": "11.5.3",
"status": "affected",
"version": "11.5",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2020-7305
2020-08-13 03:15:14
cve
cve
CVE-2020-7305
2020-08-13 03:15:14
prion
prion
Privilege escalation
2020-08-13 03:15:00
nessus
nessus
McAfee Data Loss Prevention ePO extension Multiple Vulnerabilities (SB10326)
2020-08-21 00:00:00
CVSS3
6.7
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
40.2%
Related for CVELIST:CVE-2020-7305