Skip to content
OpenAdvisories
Medium · 6.6 CVE-2020-7259 EUVD-2020-28386GHSA-4p9w-fg69-wcvg

Unsigned executable vulnerability in ENS can be used to bypass intended self-protection rules

Published Apr 15, 2020 · Updated Sep 17, 2024 · Assigned by trellix

Vendor: McAfee Product: McAfee Endpoint Security (ENS)

Description

Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to bypass local security protection via a carefully crafted input file

Affected products

VendorProductAffectedFixed
McAfee McAfee Endpoint Security (ENS) 10.x – < 10.7.0 April 2020 Update 10.7.0 April 2020 Update

References