PT-2020-19501

CVE-2020-7253

·

Published

2020-03-12

·

Updated

2020-03-17

Description by

CVSS 3.1
5.7
Medium
MetricsAV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions McAfee Agent (MA) versions prior to 5.6.4
Description The issue is related to an improper access control vulnerability in the masvc.exe component of McAfee Agent. This vulnerability allows local users with administrator privileges to disable self-protection using a command-line utility provided by McAfee.
Recommendations For McAfee Agent (MA) versions prior to 5.6.4, update to version 5.6.4 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-284: Improper Access Control
CWE-20: Improper Input Validation
Related identifiers
CVE-2020-7253
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com