CVE-2020-7290 - Privilege Escalation vulnerability in MAR for Linux

Back Back to CVE browser

HIGH

Privilege Escalation vulnerability in MAR for Linux

Published May 8, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.25%

Description

Privilege Escalation vulnerability in McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

Affected products

Vendor McAfee,LLC Product McAfee Active Response (MAR) for Linux Default
n/a
- Version
  2.4.x
  Status
  affected
  Constraints
  <2.4.3 Hotfix 1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

McAfee,LLC

McAfee Active Response (MAR) for Linux

n/a

Version	Status	Constraints
2.4.x	affected	<2.4.3 Hotfix 1

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-269

Improper Privilege Management

CWE-274

References (1)

https://kc.mcafee.com/corporate/index?page=content&id=SB10317
x_refsource_CONFIRM

Link	Providers	Tags
https://kc.mcafee.com/corporate/index?page=content&id=SB10317		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trellix

Published May 8, 2020

Updated Sep 17, 2024

Reserved Jan 21, 2020

Link CVE-2020-7290

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-7290

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-7290