CVE-2020-7323 - Authentication Protection Bypass vulnerability in ENS for Windows

Back Back to CVE browser

MEDIUM

Authentication Protection Bypass vulnerability in ENS for Windows

Published Sep 9, 2020

6.9

MEDIUM

CVSS 3.1

EPSS 0.33%

Description

Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running with elevated privileges. This issue is timing dependent and requires physical access to the machine.

Affected products

Vendor McAfee LLC Product Endpoint Security for Windows Default
n/a
- Version
  10.7.x
  Status
  affected
  Constraints
  <10.7.0 September 2020 Update

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

McAfee LLC

Endpoint Security for Windows

n/a

Version	Status	Constraints
10.7.x	affected	<10.7.0 September 2020 Update

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (1)

https://kc.mcafee.com/corporate/index?page=content&id=SB10327
x_refsource_CONFIRM

Link	Providers	Tags
https://kc.mcafee.com/corporate/index?page=content&id=SB10327		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trellix

Published Sep 9, 2020

Updated Sep 17, 2024

Reserved Jan 21, 2020

Link CVE-2020-7323

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-7323

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-7323