PT-2020-19564
CVE-2020-7337
·
تاريخ النشر
2020-12-09
·
تاريخ التحديث
2020-12-10
الوصف من
CVSS 3.1
6.7
متوسطةالمقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
McAfee VirusScan Enterprise versions prior to 8.8 Patch 16
Description
The issue allows local administrators to bypass local security protection through McAfee VirusScan Enterprise not correctly integrating with Windows Defender Application Control. This is achieved via careful manipulation of the Code Integrity checks.
Recommendations
For versions prior to 8.8 Patch 16, update to 8.8 Patch 16 or later to resolve the issue. As a temporary workaround, consider restricting access to the Code Integrity checks until a patch is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾