What is CVE-2020-7310?

CVE-2020-7310 is a medium-severity vulnerability in Mcafee Total Protection, classified under Improper Privilege Management. CVSS score: 6.9/10. Published 2020-08-21.

How severe is CVE-2020-7310?

Medium severity. CVSS v3 base score is 6.9 out of 10.

Privilege escalation in Mcafee Total Protection

CVE-2020-7310

Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection (MTP) trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file.

Vulnerability class: Privilege Escalation

EPSS: 0.003 (21.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.9 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H.

Affected products

Mcafee Total_protection
Mcafee,llc Mcafee Total Protection (Mtp) Trial — versions unspecified

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2020-7310?: CVE-2020-7310 is a medium-severity vulnerability in Mcafee Total Protection, classified under Improper Privilege Management. CVSS score: 6.9/10. Published 2020-08-21.
How severe is CVE-2020-7310?: Medium severity. CVSS v3 base score is 6.9 out of 10.