CVE-2020-7276

Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator users to access policy settings via running this tool.

Score

CVSS 3.1 6.7 Medium

Status

Modified - trellixpsirt@trellix.com

Published

2020-04-15

Last modified

2024-09-17

Weaknesses

CWE-287

Affected products

• Endpoint Security (Mcafee)
• Mcafee Endpoint Security Ens (Mcafee Llc)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10309