Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator users to access policy settings via running this tool.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Endpoint_security | Mcafee | 10.5.0 (including) | 10.5.0 (including) |
| Endpoint_security | Mcafee | 10.5.1 (including) | 10.5.1 (including) |
| Endpoint_security | Mcafee | 10.5.2 (including) | 10.5.2 (including) |
| Endpoint_security | Mcafee | 10.5.3 (including) | 10.5.3 (including) |
| Endpoint_security | Mcafee | 10.5.4 (including) | 10.5.4 (including) |
| Endpoint_security | Mcafee | 10.5.5 (including) | 10.5.5 (including) |
| Endpoint_security | Mcafee | 10.6.0 (including) | 10.6.0 (including) |