CVE-2020-7251CWE-358

ESConfig Tool able to edit configuration for newer version

Medium · published February 14, 2020

CVSS v3.1
5.0
EPSS
0%
Percentile
11.4
In the wild
Unconfirmed
What it is

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.4th percentile
Weakness
CWE-358 · Improperly Implemented Security Check for Standard
Published
2020-02-14T14:50Z
EPSS history
Timeline
  • 14 FEB 14:50Z
    ESConfig Tool able to edit configuration for newer version
    cvelistv5