CVEvulnerability
CVE-2020-7263
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-04-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264, CWE-732
Description
Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import.
Affected configurations
• mcafee endpoint security 10.5.0
• mcafee endpoint security 10.5.1
• mcafee endpoint security 10.5.2
• mcafee endpoint security 10.5.3
• mcafee endpoint security 10.5.4
• mcafee endpoint security 10.5.5
• mcafee endpoint security 10.6.0
• mcafee endpoint security 10.6.1
• mcafee endpoint security 10.7.0
Related
Weakness · not in database (1)
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness