CVE-2020-7273CWE-269

Autorun registry bypass

Medium · published April 15, 2020

CVSS v3.1
6.7
EPSS
0%
Percentile
15.0
In the wild
Unconfirmed
What it is

Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00246 · 15.0th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2020-04-15T11:35Z
EPSS history
Timeline
  • 15 APR 11:35Z
    Autorun registry bypass
    cvelistv5