TrellixCVELIST:CVE-2020-7274CVE-2020-7274 ENS elevated permissions vulnerability
6.6 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L
8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Privilege escalation vulnerability in McTray.exe in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user’s privileges).
CNA Affected
[
{
"product": "McAfee Endpoint Security (ENS)",
"vendor": "McAfee LLC",
"versions": [
{
"lessThan": "10.7.0 April 2020 Update",
"status": "affected",
"version": "10.x",
"versionType": "custom"
}
]
}
]Related
6.6 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L
8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%