CVE-2020-7326CWE-290

McAfee MAR - Improperly implemented security check

Medium · published October 15, 2020

CVSS v3.1
6.0
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

Improperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MAR failing open rather than closed

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00372 · 29.9th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2020-10-15T09:45Z
EPSS history
Timeline
  • 15 OCT 09:45Z
    McAfee MAR - Improperly implemented security check
    cvelistv5