Skip to content
OpenAdvisories
High · 8.8 CVE-2020-7319 EUVD-2020-28446GHSA-3997-6wvq-mg36

Improper Access Control Vulnerability in ENS for Windows

Published Sep 9, 2020 · Updated Sep 16, 2024 · Assigned by trellix

Description

Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file.

Affected products

VendorProductAffectedFixed
McAfee Endpoint Security for Windows 10.7.x – < 10.7.0 September 2020 Update 10.7.0 September 2020 Update

References