CVE-2020-7281 - Privilege Escalation vulnerability in McAfee Total Protection (MTP) · CoreCVE

Back Back to CVE browser

HIGH

Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Published Jul 3, 2020

7.5

HIGH

CVSS 3.1

EPSS 0.26%

Description

Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

Affected products

Vendor McAfee,LLC Product McAfee Total Protection (MTP) Default
n/a
- Version
  16.0.R26
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

McAfee Total Protection (MTP)

n/a

Version	Status	Constraints
16.0.R26	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (1)

https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103062
x_refsource_CONFIRM

Link	Providers	Tags
https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103062		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trellix

Published Jul 3, 2020

Updated Aug 4, 2024

Reserved Jan 21, 2020

Link CVE-2020-7281

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2020-7281

Severity n/a

Public date n/a

Links CVE-2020-7281

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a