CVE-2020-7319highCWE-59

CVE-2020-7319: high-severity vulnerability in McAfee LLC Endpoint Security for Windows

Improper Access Control Vulnerability in ENS for Windows

Published · Updated

Follow this CVE+ Monitor McAfee Endpoint Security

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.4%
Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
McAfee LLC · Endpoint Security for Windows
Related CVEs — McAfee LLC Endpoint Security for Windows

In the same product, most dangerous first.

CVE-2020-7323MEDIUMAuthentication Protection Bypass vulnerability in ENS for WindowsEPSS 0.3%CVE-2020-7320MEDIUMProtection Mechanism Failure in ENS for WindowsEPSS 0.3%CVE-2020-7322MEDIUMExposure of Sensitive Information in ENS for WindowsEPSS 0.2%