CVE-2020-7265

Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Mac prior to 10.6.9 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.
Configurations

Configuration 1 (hide)

cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:macos:*:*

History

21 Nov 2024, 05:36

Type Values Removed Values Added
CVSS v2 : 3.6
v3 : 8.4
v2 : 3.6
v3 : 8.8
References () https://kc.mcafee.com/corporate/index?page=content&id=SB10316 - () https://kc.mcafee.com/corporate/index?page=content&id=SB10316 -

07 Nov 2023, 03:25

Type Values Removed Values Added
References (CONFIRM) https://kc.mcafee.com/corporate/index?page=content&id=SB10316 - Vendor Advisory () https://kc.mcafee.com/corporate/index?page=content&id=SB10316 -

Information

Published : 2020-05-08 12:15

Updated : 2024-11-21 05:36


NVD link : CVE-2020-7265

Mitre link : CVE-2020-7265

CVE.ORG link : CVE-2020-7265


JSON object : View

Products Affected

mcafee

  • endpoint_security
CWE
CWE-274

Improper Handling of Insufficient Privileges

CWE-269

Improper Privilege Management