CVE-2020-7253CWE-284

Improper access control vulnerability in McAfee Agent

Medium · published March 12, 2020

CVSS v3.1
5.7
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line utility.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2020-03-12T10:55Z
EPSS history
Timeline
  • 12 MAR 10:55Z
    Improper access control vulnerability in McAfee Agent
    cvelistv5