CVE-2020-7257

Privilege Escalation vulnerability through Symbolic links in ENS

High · published April 15, 2020

CVSS v3.1
8.4
EPSS
0%
Percentile
15.8
In the wild
Unconfirmed
What it is

Privilege escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links whilst an anti-virus scan was in progress. This is timing dependent.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00252 · 15.8th percentile
Published
2020-04-15T12:00Z
EPSS history
Timeline
  • 15 APR 12:00Z
    Privilege Escalation vulnerability through Symbolic links in ENS
    cvelistv5