PT-2020-19520

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 McAfee Endpoint Security ENS for Windows versions prior to 10.6.1 April 2020 Description Exploiting incorrectly configured access control security levels vulnerability in ENS...

CVE-2020-7257: Improper Privilege Management

Privilege escalation vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2020 Update allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links whilst an anti-virus scan was...

CVE-2020-7278: Improper Access Control

Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security ENS for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users to allow or block unauthorized traffic via pre-existing rules...

PT-2020-19505

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 February 2020 Update Description A privilege escalation issue allows local users to delete and create files they would not normally have permission to, by altering the target of...

CVE-2020-7261: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security ENS Prior to 10.7.0 February 2020 Update allows local users to disable Endpoint Security via a carefully crafted user input...

PT-2020-19503

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 February 2020 Update Description A privilege escalation issue exists in the administrative user interface of McAfee Endpoint Security ENS for Windows, where the system fails to...

CVE-2020-7273: Improper Privilege Management

Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security ENS for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters...

CVE-2020-7263

Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security ENS for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for...

Improper access control

Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security ENS for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for...

CVE-2020-7263 ENS configuration can be edited by attacker with local administrator permissions

Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security ENS for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for...

PT-2020-19509

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security ENS for Windows affected versions not specified Description The issue is related to an improper access control vulnerability in ESconfigTool.exe, which allows a local administrator to alter the ENS configuration,...

CVE-2020-7251

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security ENS Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS...

Improper access control

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security ENS Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS...

CVE-2020-7251

The CVE-2020-7251 issue affects McAfee Endpoint Security (ENS) for Windows specifically its Configuration Tool. The root cause is improper access control in the Configuration Tool prior to ENS 10.6.1 (February 2020 Update), enabling local users to disable security features via unauthorized use of...

CVE-2020-7251 ESConfig Tool able to edit configuration for newer version

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security ENS Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS...

CVE-2020-7251: Improperly Implemented Security Check for Standard

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security ENS Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS...

Unauthorized Ownership Transfer

@ensdomains/ens is vulnerable to unauthorized transfer of ownership. Due to a flawed ENS deployment in ENS registry, a user with ENS Domain ownership is allowed to perform an unauthorized transfer of ownership to another user and to regain the ownership without the consent or awareness of new...

CVE-2020-5232

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...

CVE-2020-5232

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...

Design/Logic Flaw

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...