CVE-2020-7252CWE-250

Unquoted service executable path

Medium · published February 17, 2020

CVSS v3.1
4.2
EPSS
1%
Percentile
42.2
In the wild
Unconfirmed
What it is

Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00504 · 42.2th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2020-02-17T06:35Z
EPSS history
Timeline
  • 17 FEB 06:35Z
    Unquoted service executable path
    cvelistv5