Authentication flaw

2020-04-1512:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator users to access policy settings via running this tool.

CPENameOperatorVersion
endpoint_securityeq10.5.0
endpoint_securityeq10.5.1
endpoint_securityeq10.5.2
endpoint_securityeq10.5.3
endpoint_securityeq10.5.4
endpoint_securityeq10.5.5
endpoint_securityeq10.6.0

Name	Operator	Version
endpoint_security	eq	10.5.0
endpoint_security	eq	10.5.1
endpoint_security	eq	10.5.2
endpoint_security	eq	10.5.3
endpoint_security	eq	10.5.4
endpoint_security	eq	10.5.5
endpoint_security	eq	10.6.0

References

kc.mcafee.com/corporate/index?page=content&id=SB10309