CVEvulnerability

CVE-2020-7254

7.8 HIGH Published 2020-03-12 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2020-03-12
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.7 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses: CWE-264, CWE-269

Description

Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.

Affected configurations

• mcafee advanced threat defense (>= 4.0 < 4.8.2)

Weakness · not in database (1)

CWE-264

Weakness · CWE (1)

CWE-269 Improper Privilege Management weakness

References