What is CVE-2020-7254?

CVE-2020-7254 is a high-severity vulnerability in Mcafee Advanced Threat Defense, classified under CWE-264. CVSS score: 7.7/10. Published 2020-03-12.

How severe is CVE-2020-7254?

High severity. CVSS v3 base score is 7.7 out of 10.

Privilege escalation in Mcafee Advanced Threat Defense

CVE-2020-7254

Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.

EPSS: 0.003 (22.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H.

Affected products

Mcafee Advanced_threat_defense
Mcafee, Llc Mcafee Advanced Threat Defense (Atd) — versions 4.x

Weakness classification (CWE)

CWE-264
CWE-269 — Improper Privilege Management

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2020-7254?: CVE-2020-7254 is a high-severity vulnerability in Mcafee Advanced Threat Defense, classified under CWE-264. CVSS score: 7.7/10. Published 2020-03-12.
How severe is CVE-2020-7254?: High severity. CVSS v3 base score is 7.7 out of 10.