CVE Vulnerabilities

CVE-2020-7288

Improper Handling of Insufficient Privileges

Published: May 08, 2020 | Modified: Nov 21, 2024
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Mac prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

Weakness

The product does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.

Affected Software

Name Vendor Start Version End Version
Endpoint_detection_and_response Mcafee * 3.1.0 (excluding)
Endpoint_detection_and_response Mcafee 3.1.0 (including) 3.1.0 (including)

References