Privilege escalation

Privilege Escalation vulnerability in McAfee Total Protection MTP before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to. This is achieved through running a malicious script or program on the target machine...

CVE-2020-7283

CVE-2020-7283 is a privilege-escalation issue affecting McAfee Total Protection (MTP) prior to 16.0.R26. The vulnerability arises from symbolic link manipulation that lets a local attacker, who can run a malicious script/program on the target, create and edit files in locations they normally cann...

CVE-2020-7283 Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Privilege Escalation vulnerability in McAfee Total Protection MTP before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to. This is achieved through running a malicious script or program on the target machine...

CVE-2020-7281

This CVE affects McAfee Total Protection (MTP) before version 16.0.R26. The issue is a local privilege-escalation where an attacker can cause a McAfee delete operation to target an unintended file by manipulating symbolic links, via running a malicious script/program on the target. The root cause...

CVE-2020-7281 Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious...

CVE-2020-7282

CVE-2020-7282 affects McAfee Total Protection (MTP) prior to 16.0.R26. A local attacker can escalate privileges and delete files by exploiting symbolic-link manipulation that redirects a McAfee delete action to an unintended file, using a malicious script or program on the target machine. A fix e...

CVE-2020-7282 Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Privilege Escalation vulnerability in McAfee Total Protection MTP before 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious...

CVE-2020-7284: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information in McAfee Network Security Management NSM prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface CLI...

CVE-2020-7283: Improper Handling of Insufficient Privileges

Privilege Escalation vulnerability in McAfee Total Protection MTP before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to. This is achieved through running a malicious script or program on the target machine...

CVE-2020-7282: Improper Link Resolution Before File Access

Privilege Escalation vulnerability in McAfee Total Protection MTP before 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious...

CVE-2020-7281: Improper Privilege Management

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious...

PT-2020-3148

Name of the Vulnerable Software and Affected Versions McAfee Network Security Management NSM versions prior to 10.1.7.7 Description The issue is related to the exposure of sensitive information in McAfee Network Security Management NSM, which can be exploited by local users to gain unauthorized...

PT-2020-3149

Name of the Vulnerable Software and Affected Versions McAfee Total Protection versions prior to 16.0.R26 Description The issue is related to insufficient access control in McAfee Total Protection, allowing an attacker to escalate privileges by manipulating symbolic links or running a malicious...

PT-2020-3147

Name of the Vulnerable Software and Affected Versions McAfee Total Protection versions prior to 16.0.R26 Description The issue allows local users to delete files they would otherwise not have access to by manipulating symbolic links, redirecting a McAfee delete action to an unintended file. This...

PT-2020-3146

Name of the Vulnerable Software and Affected Versions McAfee Total Protection versions prior to 16.0.R26 Description The issue allows local users to delete files they would otherwise not have access to by manipulating symbolic links, redirecting a McAfee delete action to an unintended file. This...

McAfee Advanced Threat Defense Information Disclosure Vulnerability (CNVD-2020-52853)

McAfee Advanced Threat Defense ATD is a suite of advanced threat protection systems from the U.S.-based company McAfee McAfee. The system provides zero-day attack protection and malware protection through static code analysis, malware dynamic analysis and machine learning. An information disclosu...

CVE-2020-7262

Improper Access Control vulnerability in McAfee Advanced Threat Defense ATD prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request parameter...

CVE-2020-7262

Improper Access Control vulnerability in McAfee Advanced Threat Defense ATD prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request parameter...

Improper access control

Improper Access Control vulnerability in McAfee Advanced Threat Defense ATD prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request parameter...

CVE-2020-7262 Improper Access Control vulnerability in ATD

Improper Access Control vulnerability in McAfee Advanced Threat Defense ATD prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request parameter...