CVE Vulnerabilities

CVE-2020-7310

Improper Privilege Management

Published: Aug 21, 2020 | Modified: Nov 07, 2023
CVSS 3.x
6.9
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H
CVSS 2.x
3.3 LOW
AV:L/AC:M/Au:N/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection (MTP) trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Total_protection Mcafee * 4.0.161.1 (excluding)

Potential Mitigations

References