Vulnerability Details : CVE-2020-7324
Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass security mechanisms and deny access to the SYSTEM folder via incorrectly applied permissions.
Exploit prediction scoring system (EPSS) score for CVE-2020-7324
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2020-7324
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
3.6
|
LOW | AV:L/AC:L/Au:N/C:N/I:P/A:P |
3.9
|
4.9
|
NIST |
|
6.1
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H |
1.8
|
4.2
|
NIST |
|
6.1
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H |
1.8
|
4.2
|
McAfee (DEFUNCT) |
CWE ids for CVE-2020-7324
-
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.Assigned by:
- nvd@nist.gov (Primary)
- psirt@mcafee.com (Secondary)
References for CVE-2020-7324
-
https://kc.mcafee.com/corporate/index?page=content&id=SB10328
McAfee Security Bulletin - MVISION Endpoint update fixes two vulnerabilities (CVE-2020-7324 and CVE-2020-7325)Vendor Advisory
Products affected by CVE-2020-7324
- cpe:2.3:a:mcafee:mvision_endpoint:*:*:*:*:*:*:*:*