CVE-2020-7310CWE-269

Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial installer

Medium · published August 21, 2020

CVSS v3.1
6.9
EPSS
0%
Percentile
20.8
In the wild
Unconfirmed
What it is

Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection (MTP) trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file.

The record
Technical detail
CVSS v3.1
6.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00293 · 20.8th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2020-08-21T08:30Z
EPSS history
Timeline
  • 21 AUG 08:30Z
    Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial installer
    cvelistv5