CVE-2020-7254CWE-269

Privilege escalation in Advanced Threat Defense

High · published March 12, 2020

CVSS v3.1
7.7
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2020-03-12T11:00Z
EPSS history
Timeline
  • 12 MAR 11:00Z
    Privilege escalation in Advanced Threat Defense
    cvelistv5