CVE-2020-7276CWE-287

Unrestricted Policy Management using MfeUpgradeTool.exe

Medium · published April 15, 2020

CVSS v3.1
6.4
EPSS
0%
Percentile
19.4
In the wild
Unconfirmed
What it is

Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator users to access policy settings via running this tool.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00280 · 19.4th percentile
Weakness
CWE-287 · Improper Authentication
Published
2020-04-15T11:20Z
EPSS history
Timeline
  • 15 APR 11:20Z
    Unrestricted Policy Management using MfeUpgradeTool.exe
    cvelistv5