Vulnerability in Mcafee Mvision_endpoint
CVE-2020-7325
Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to a…
EPSS: 0.003 (25.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Mcafee Mvision_endpoint
- Mcafee Llc Mvision Endpoint — versions 20.x
Weakness classification (CWE)
Public proof-of-concept exploits
References
- trellixpsirt@trellix.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2020-7325?
- CVE-2020-7325 is a medium-severity vulnerability in Mcafee Mvision_endpoint, classified under Improper Link Resolution Before File Access. CVSS score: 5.5/10. Published 2020-09-09.
- How severe is CVE-2020-7325?
- Medium severity. CVSS v3 base score is 5.5 out of 10.
- Is CVE-2020-7325 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.