CVE-2020-7280CWE-269

Symbolic Link vulnerability during DAT update

High · published June 10, 2020

CVSS v3.1
7.8
EPSS
0%
Percentile
33.1
In the wild
Unconfirmed
What it is

Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing dependent.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00400 · 33.1th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2020-06-10T11:52Z
EPSS history
Timeline
  • 10 JUN 11:52Z
    Symbolic Link vulnerability during DAT update
    cvelistv5