Improper access control

2020-04-0107:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import.

CPENameOperatorVersion
endpoint_securityeq10.5.0
endpoint_securityeq10.5.1
endpoint_securityeq10.5.2
endpoint_securityeq10.5.3
endpoint_securityeq10.5.4
endpoint_securityeq10.5.5
endpoint_securityeq10.6.0
endpoint_securityeq10.6.1
endpoint_securityeq10.7.0

Name	Operator	Version
endpoint_security	eq	10.5.0
endpoint_security	eq	10.5.1
endpoint_security	eq	10.5.2
endpoint_security	eq	10.5.3
endpoint_security	eq	10.5.4
endpoint_security	eq	10.5.5
endpoint_security	eq	10.6.0
endpoint_security	eq	10.6.1
endpoint_security	eq	10.7.0

References

kc.mcafee.com/corporate/index?page=content&id=SB10314