What is CVE-2020-7302?

CVE-2020-7302 is a medium-severity vulnerability in Mcafee Data Loss Prevention, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 5.4/10. Published 2020-08-13.

How severe is CVE-2020-7302?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Arbitrary file upload in Mcafee Data Loss Prevention

CVE-2020-7302

Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.

Vulnerability class: Unrestricted File Upload

EPSS: 0.007 (49.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L.

Affected products

Mcafee Data_loss_prevention
Mcafee Dlp Epo Extension — versions 11.3, 11.4, 11.5

Weakness classification (CWE)

CWE-434 — Unrestricted Upload of File with Dangerous Type

References

trellixpsirt@trellix.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2020-7302?: CVE-2020-7302 is a medium-severity vulnerability in Mcafee Data Loss Prevention, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 5.4/10. Published 2020-08-13.
How severe is CVE-2020-7302?: Medium severity. CVSS v3 base score is 5.4 out of 10.