CVE-2020-7325 - Privilege Escalation vulnerability in MVISION Endpoint · CoreCVE

Back Back to CVE browser

HIGH

Privilege Escalation vulnerability in MVISION Endpoint

Published Sep 9, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.33%

Description

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file.

Affected products

Vendor McAfee LLC Product MVISION Endpoint Default
n/a
- Version
  20.x
  Status
  affected
  Constraints
  <20.9

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

MVISION Endpoint

n/a

Version	Status	Constraints
20.x	affected	<20.9

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-59

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28452
Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10328
x_refsource_CONFIRM

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28452		Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10328		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trellix

Published Sep 9, 2020

Updated Sep 17, 2024

Reserved Jan 21, 2020

Link CVE-2020-7325

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2020-7325

Severity n/a

Public date n/a

Links CVE-2020-7325

Assigner trellix

Published Sep 9, 2020

Updated Sep 17, 2024

Exploited since n/a

Link EUVD-2020-28452

EUVD-2020-28452