What is CVE-2020-7300?

CVE-2020-7300 is a medium-severity vulnerability in Mcafee Data Loss Prevention, classified under Incorrect Authorization. CVSS score: 4.6/10. Published 2020-08-12.

How severe is CVE-2020-7300?

Medium severity. CVSS v3 base score is 4.6 out of 10.

Auth bypass in Mcafee Data Loss Prevention

CVE-2020-7300

Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages.

Vulnerability class: Broken Access Control

EPSS: 0.006 (44.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L.

Affected products

Mcafee Data_loss_prevention
Mcafee Dlp Epo Extension — versions 11.3, 11.4, 11.5

Weakness classification (CWE)

CWE-863 — Incorrect Authorization

References

trellixpsirt@trellix.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2020-7300?: CVE-2020-7300 is a medium-severity vulnerability in Mcafee Data Loss Prevention, classified under Incorrect Authorization. CVSS score: 4.6/10. Published 2020-08-12.
How severe is CVE-2020-7300?: Medium severity. CVSS v3 base score is 4.6 out of 10.