Lucene search

TrellixCVELIST:CVE-2020-7334

HistoryOct 15, 2020 - 9:05 a.m.

CVE-2020-7334 Improper privilege assignment vulnerability in the installer component of MACC

2020-10-1509:05:17

CWE-266

trellix

www.cve.org

vulnerability

mcafee

privilege assignment

installer

macc

CVSS3

7.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

Percentile

12.6%

JSON

Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2 allows local administrators to change or update the configuration settings via a carefully constructed MSI configured to mimic the genuine installer. This version adds further controls for installation/uninstallation of software.

CNA Affected

[
  {
    "product": "McAfee Application and Change Control (MACC)",
    "vendor": "McAfee,LLC",
    "versions": [
      {
        "lessThan": "8.3.2",
        "status": "affected",
        "version": "8.x",
        "versionType": "custom"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10333

CVSS3

7.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2020-7334