Skip to content
OpenAdvisories
Medium · 5.5 CVE-2020-7343 EUVD-2020-28470GHSA-v42c-5jq2-7p9m

Improper Authorization vulnerability in MA

Published Jan 18, 2021 · Updated Sep 17, 2024 · Assigned by trellix

Description

Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files.

Affected products

VendorProductAffectedFixed
McAfee McAfee Agent 5.7.x – < 5.7.1 5.7.1

References