HIGH
Privilege escalation in McAfee DLP Endpoint for Windows
Published Mar 23, 2021
7.8
HIGHCVSS 3.1
EPSS 0.35%
Description
Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, low privileged, attacker through the use of junctions to cause the product to load DLLs of the attacker's choosing. This requires the creation and removal of junctions by the attacker along with sending a specific IOTL command at the correct time.
Affected products
-
- Version unspecifiedStatusaffectedConstraints<11.6.100
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| McAfee,LLC | McAfee Data Loss Prevention (DLP) Endpoint for Windows | unaffected |
|
- < 11.6.100
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28473 Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10344 x_refsource_CONFIRM
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28473 | Advisory | |
| https://kc.mcafee.com/corporate/index?page=content&id=SB10344 | x_refsource_CONFIRM |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner trellix
Published Mar 23, 2021
Updated Aug 4, 2024
Reserved Jan 21, 2020
Link CVE-2020-7346
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2020-28473 Assigner trellix
Published Mar 23, 2021
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-28473