CVE-2020-7305CWE-269

DLP ePO extension - Privilege escalation

Medium · published August 13, 2020

CVSS v3.1
6.7
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

Privilege escalation vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01018 · 63.0th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2020-08-13T03:05Z
EPSS history
Timeline
  • 13 AUG 03:05Z
    DLP ePO extension - Privilege escalation
    cvelistv5