CVE-2020-7319

Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file.
Configurations

Configuration 1 (hide)

cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*

History

21 Nov 2024, 05:37

Type Values Removed Values Added
References () https://kc.mcafee.com/corporate/index?page=content&id=SB10327 - () https://kc.mcafee.com/corporate/index?page=content&id=SB10327 -

07 Nov 2023, 03:26

Type Values Removed Values Added
References (CONFIRM) https://kc.mcafee.com/corporate/index?page=content&id=SB10327 - Vendor Advisory () https://kc.mcafee.com/corporate/index?page=content&id=SB10327 -

Information

Published : 2020-09-09 10:15

Updated : 2024-11-21 05:37


NVD link : CVE-2020-7319

Mitre link : CVE-2020-7319

CVE.ORG link : CVE-2020-7319


JSON object : View

Products Affected

mcafee

  • endpoint_security
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')