PT-2020-19551

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 September 2020 Update Description The issue allows local users to gain access to sensitive information due to the incorrect logging of sensitive information in debug logs...

CVE-2020-7319: Improper Link Resolution Before File Access

Improper Access Control vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file...

PT-2020-19549

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 September 2020 Update Description The issue allows local users to access files they otherwise would not have access to by manipulating symbolic links. This manipulation redirect...

CVE-2020-7323: Improper Authentication

Authentication Protection Bypass vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running...

CVE-2020-7322: Insertion of Sensitive Information into Log File

Information Disclosure Vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs...

Privilege escalation

Privilege Escalation vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved...

CVE-2020-7265

CVE-2020-7265 affects McAfee Endpoint Security (ENS) for Mac, prior to 10.6.9. A local attacker can escalate privileges by abusing symbolic links to redirect a McAfee delete operation to an unintended file, enabling deletion of files the user otherwise could not access. Root cause is manipulation...

CVE-2020-7264

CVE-2020-7264 affects McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847. The issue is a privilege-escalation in which local users can delete files they would not normally access by manipulating symbolic links to redirect a McAfee delete action to an unintended file. Root ca...

CVE-2020-7264: Improper Handling of Insufficient Privileges

Privilege Escalation vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved...

PT-2020-19511

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security ENS for Mac versions prior to 10.6.9 Description The issue allows local users to delete files they would otherwise not have access to by manipulating symbolic links. This manipulation redirects a delete action to an...

CVE-2020-7265: Improper Handling of Insufficient Privileges

Privilege Escalation vulnerability in McAfee Endpoint Security ENS for Mac prior to 10.6.9 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a...

CVE-2020-7250

Symbolic link manipulation vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2020 Update allows authenticated local user to potentially gain an escalation of privileges by pointing the link to files which the user which not normally have permission to alter via...

CVE-2020-7255

CVE-2020-7255 is a local privilege-escalation vulnerability in the administrative UI of McAfee Endpoint Security (ENS) for Windows , affected in versions prior to 10.7.0 February 2020 Update . The issue arises because ENS does not properly check user permissions when editing configuration via the...

CVE-2020-7255 Privilege Escalation vulnerability  in ENS

Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2020 Update allows local users to gain elevated privileges via ENS not checking user permissions when editing configuration in the ENS client interface...

CVE-2020-7250

Affected product: McAfee Endpoint Security for Windows (ENS) prior to 10.7.0 February 2020 Update. Vulnerability: Symbolic link manipulation that lets an authenticated local user escalate privileges by crafting symbolic links in the ENS log file directory to target files the user typically cannot...

CVE-2020-7261

Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security ENS Prior to 10.7.0 February 2020 Update allows local users to disable Endpoint Security via a carefully crafted user input...

Privilege escalation

Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security ENS Prior to 10.7.0 February 2020 Update allows local users to bypass local security protection via a carefully crafted input file...

Design/Logic Flaw

Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security ENS for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters...

Buffer overflow

Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security ENS Prior to 10.7.0 February 2020 Update allows local users to disable Endpoint Security via a carefully crafted user input...

CVE-2020-7257

CVE-2020-7257 is a local privilege-escalation in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update. The vulnerability arises from symbolic-link manipulation that can let an authenticated local user alter files they normally lack permission to modify, specifically whe...