CVE-2020-7334CWE-266

Improper privilege assignment vulnerability in the installer component of MACC

High · published October 15, 2020

CVSS v3.1
7.7
EPSS
0%
Percentile
19.9
In the wild
Unconfirmed
What it is

Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2 allows local administrators to change or update the configuration settings via a carefully constructed MSI configured to mimic the genuine installer. This version adds further controls for installation/uninstallation of software.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00285 · 19.9th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2020-10-15T09:05Z
EPSS history
Timeline
  • 15 OCT 09:05Z
    Improper privilege assignment vulnerability in the installer component of MACC
    cvelistv5