Skip to content
OpenAdvisories
Medium · 5.0 CVE-2020-7251 EUVD-2020-28378GHSA-5qr7-8ch4-q94w

ESConfig Tool able to edit configuration for newer version

Published Feb 14, 2020 · Updated Aug 4, 2024 · Assigned by trellix

Description

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.

Affected products

VendorProductAffectedFixed
McAfee Mcafee Endpoint Security (ENS) 10.6.x – < 10.6.1 February 2020 update 10.6.1 February 2020 update

References