CVE-2020-7251

Summary

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.

Affected Software

VendorProductVersion RangeStatus
McAfee, LLCMcafee Endpoint Security (ENS)10.6.x < 10.6.1 February 2020 updateaffected

Weaknesses

  • CWE-358: CWE-358 Improperly Implemented Security Check for Standard

ADP Enrichment

CVE Program Container

Additional References

References