CVE-2020-7251

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.

Score

CVSS 3.1 5.5 Medium

Status

Modified - trellixpsirt@trellix.com

Published

2020-02-14

Last modified

2024-08-04

Weaknesses

CWE-358, CWE-863

Affected products

• Endpoint Security (Mcafee)
• Mcafee Endpoint Security Ens (Mcafee Llc)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10299