Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-7290 State: PUBLISHED Published: 2020-05-08T12:45:20.705115Z Last Updated: 2024-09-17T00:37:08.125Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Active Response (MAR) for Linux Problem Types: CWE-274 Description: Privilege Escalation vulnerability in McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10317
CVE ID: CVE-2020-7291 State: PUBLISHED Published: 2020-05-08T12:45:14.656931Z Last Updated: 2024-09-16T17:23:16.135Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Active Response (MAR) for Mac Problem Types: CWE-274 Description: Privilege Escalation vulnerability in McAfee Active Response (MAR) for Mac prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10317
CVE ID: CVE-2020-7292 State: PUBLISHED Published: 2020-07-15T14:50:14 Last Updated: 2024-08-04T09:25:48.627Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: McAfee Products: McAfee Web Gateway (MWG) Problem Types: CWE-838 Description: Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10323
CVE ID: CVE-2020-7293 State: PUBLISHED Published: 2020-09-15T22:50:13 Last Updated: 2024-08-04T09:25:48.986Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee Products: McAfee Web Gateway (MWG) Problem Types: CWE-287 Description: Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10323
CVE ID: CVE-2020-7294 State: PUBLISHED Published: 2020-09-15T23:00:17 Last Updated: 2024-08-04T09:25:48.869Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: McAfee Products: McAfee Web Gateway (MWG) Problem Types: CWE-287 Description: Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected files via improper access controls in the REST interface. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10323
CVE ID: CVE-2020-7295 State: PUBLISHED Published: 2020-09-15T23:05:16 Last Updated: 2024-08-04T09:25:48.950Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: McAfee Products: McAfee Web Gateway (MWG) Problem Types: CWE-287 Description: Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10323
CVE ID: CVE-2020-7296 State: PUBLISHED Published: 2020-09-15T23:10:14 Last Updated: 2024-08-04T09:25:48.991Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: McAfee Products: McAfee Web Gateway (MWG) Problem Types: CWE-287 Description: Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configuration files via improper access control in the user interface. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10323
CVE ID: CVE-2020-7297 State: PUBLISHED Published: 2020-09-15T23:15:15 Last Updated: 2024-08-04T09:25:48.996Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: McAfee Products: McAfee Web Gateway (MWG) Problem Types: CWE-287 Description: Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected dashboard data via improper access control in the user interface. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10323
CVE ID: CVE-2020-7298 State: PUBLISHED Published: 2020-08-05T20:55:14 Last Updated: 2024-08-04T09:25:48.965Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: McAfee Products: McAfee Total Protection (MTP) Problem Types: Unexpected behavior violation Description: Unexpected behavior violation in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to turn off real time scanning via a specially crafted object making a specific function call. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103062
CVE ID: CVE-2020-7299 State: PUBLISHED Published: 2020-09-04T14:05:21.286070Z Last Updated: 2024-09-16T19:05:05.653Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N) Vendors: McAfee,LLC Products: McAfee True Key Windows client Problem Types: CWE-522 Description: Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific situations. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/po
fic situations. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/oracle/webcenter/page/scopedMD/s55728c97_466d_4ddb_952d_05484ea932c6/Page29.jspx?wc.contextURL=%2Fspaces%2Fcp&articleId=TS103066&_afrLoop=1258314779734827&leftWidth=0%25&showFooter=false&showHeader=false&rightWidth=0%25&centerWidth=100%25
CVE ID: CVE-2020-7300 State: PUBLISHED Published: 2020-08-12T22:05:15 Last Updated: 2024-08-04T09:25:49.062Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: McAfee Products: DLP ePO extension Problem Types: CWE-863 Description: Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE ID: CVE-2020-7301 State: PUBLISHED Published: 2020-08-12T22:10:13 Last Updated: 2024-08-04T09:25:49.031Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: McAfee Products: DLP ePO extension Problem Types: CWE-79 Description: Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE ID: CVE-2020-7302 State: PUBLISHED Published: 2020-08-13T02:50:13 Last Updated: 2024-08-04T09:25:49.041Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: McAfee Products: DLP ePO extension Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE ID: CVE-2020-7303 State: PUBLISHED Published: 2020-08-13T02:55:13 Last Updated: 2024-08-04T09:25:49.063Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: McAfee Products: DLP ePO extension Problem Types: CWE-79 Description: Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to run in a user's browser via adding a new label. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE ID: CVE-2020-7304 State: PUBLISHED Published: 2020-08-13T03:00:19 Last Updated: 2024-08-04T09:25:49.056Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: McAfee Products: DLP ePO extension Problem Types: CWE-352 Description: Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE ID: CVE-2020-7305 State: PUBLISHED Published: 2020-08-13T03:05:15 Last Updated: 2024-08-04T09:25:48.994Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: McAfee Products: DLP ePO extension Problem Types: CWE-269 Description: Privilege escalation vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE ID: CVE-2020-7306 State: PUBLISHED Published: 2020-08-13T03:10:17 Last Updated: 2024-08-04T09:25:48.986Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: McAfee Products: Data Loss Prevention(DLP) Problem Types: CWE-522 Description: Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the ADRMS username and password via unprotected log files containing plain text Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE ID: CVE-2020-7307 State: PUBLISHED Published: 2020-08-13T03:20:13 Last Updated: 2024-08-04T09:25:49.046Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: McAfee Products: Data Loss Prevention(DLP) Problem Types: CWE-522 Description: Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE ID: CVE-2020-7308 State: PUBLISHED Published: 2021-04-15T07:40:19 Last Updated: 2024-08-04T09:25:49.044Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: McAfee,LLC Products: McAfee Endpoint Security (ENS) for WIndows Problem Types: CWE-319 Description: Cleartext Transmission of Sensitive Information between McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update and McAfee Global Threat Intelligence (GTI) servers using DNS allows a remote attacker to view the requests from ENS and responses from GTI over DNS. By gaining control of an intermediate DNS server or altering the network DNS configuration, it is possible for an attacker
gaining control of an intermediate DNS server or altering the network DNS configuration, it is possible for an attacker to intercept requests and send their own responses. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10354
CVE ID: CVE-2020-7309 State: PUBLISHED Published: 2020-08-26T06:00:19.835635Z Last Updated: 2024-09-16T17:03:22.066Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: McAfee, LLC Products: McAfee Application and Change Control Problem Types: CWE-79 Description: Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10324
CVE ID: CVE-2020-7310 State: PUBLISHED Published: 2020-08-21T08:30:16 Last Updated: 2024-08-04T09:25:48.981Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Total Protection (MTP) Trial Problem Types: CWE-269 Description: Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection (MTP) trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file. Additional Analyst Notes: - CVE Program Container: References: - http://service.mcafee.com/FAQDocument.aspx?&id=TS103067
CVE ID: CVE-2020-7311 State: PUBLISHED Published: 2020-09-10T09:45:21.474269Z Last Updated: 2024-09-17T01:31:44.215Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee LLC Products: MA for Windows Problem Types: CWE-269 Description: Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10325
CVE ID: CVE-2020-7312 State: PUBLISHED Published: 2020-09-10T09:45:15.974769Z Last Updated: 2024-09-17T02:31:47.777Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee LLC Products: MA for Windows Problem Types: CWE-427 Description: DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10325
CVE ID: CVE-2020-7314 State: PUBLISHED Published: 2020-09-10T09:50:14.820543Z Last Updated: 2024-09-17T00:16:24.860Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee LLC Products: McAfee DXL for Mac shipped with MA Problem Types: CWE-732 Description: Privilege Escalation Vulnerability in the installer in McAfee Data Exchange Layer (DXL) Client for Mac shipped with McAfee Agent (MA) for Mac prior to MA 5.6.6 allows local users to run commands as root via incorrectly applied permissions on temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10325
CVE ID: CVE-2020-7315 State: PUBLISHED Published: 2020-09-10T09:55:14.173000Z Last Updated: 2024-09-16T20:51:55.703Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: McAfee LLC Products: MA for Windows Problem Types: CWE-426 Description: DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10325
CVE ID: CVE-2020-7316 State: PUBLISHED Published: 2020-10-07T18:40:14 Last Updated: 2024-08-04T09:25:49.056Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: McAfee Products: File & Removable Media Protection (FRP) Problem Types: CWE-428 Description: Unquoted service path vulnerability in McAfee File and Removable Media Protection (FRP) prior to 5.3.0 allows local users to execute arbitrary code, with higher privileges, via execution and from a compromised folder. This issue may result in files not being encrypted when a policy is triggered. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=
Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10330
CVE ID: CVE-2020-7317 State: PUBLISHED Published: 2020-10-14T18:20:21 Last Updated: 2024-08-04T09:25:48.957Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: McAfee Products: ePolicy Orchistrator (ePO) Problem Types: CWE-79 Description: Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for "syncPointList" not being correctly sanitsed. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10332
CVE ID: CVE-2020-7318 State: PUBLISHED Published: 2020-10-14T18:20:14 Last Updated: 2024-08-04T09:25:48.958Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: McAfee Products: ePolicy Orchistrator (ePO) Problem Types: CWE-79 Description: Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10332
CVE ID: CVE-2020-7319 State: PUBLISHED Published: 2020-09-09T09:15:20.238710Z Last Updated: 2024-09-16T19:04:56.998Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee LLC Products: Endpoint Security for Windows Problem Types: CWE-59 Description: Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=S
Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10327
CVE ID: CVE-2020-7320 State: PUBLISHED Published: 2020-09-09T09:15:14.912039Z Last Updated: 2024-09-16T19:09:55.110Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L) Vendors: McAfee LLC Products: Endpoint Security for Windows Problem Types: CWE-693 Description: Protection Mechanism Failure vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the detection capability allowing otherwise detected malware to run via stopping certain Microsoft services. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10327
CVE ID: CVE-2020-7322 State: PUBLISHED Published: 2020-09-09T09:30:16.088862Z Last Updated: 2024-09-16T21:57:51.111Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: McAfee LLC Products: Endpoint Security for Windows Problem Types: CWE-532 Description: Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10327
CVE ID: CVE-2020-7323 State: PUBLISHED Published: 2020-09-09T09:35:14.968200Z Last Updated: 2024-09-17T01:26:01.081Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L) Vendors: McAfee LLC Products: Endpoint Security for Windows Problem Types: CWE-287 Description: Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running with elevated privileges. This issue is timing dependent and requires physical access to the machine. Additional An
ning with elevated privileges. This issue is timing dependent and requires physical access to the machine. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10327
CVE ID: CVE-2020-7324 State: PUBLISHED Published: 2020-09-09T09:40:15.806842Z Last Updated: 2024-09-16T23:31:24.696Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: McAfee LLC Products: MVISION Endpoint Problem Types: CWE-269 Description: Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass security mechanisms and deny access to the SYSTEM folder via incorrectly applied permissions. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10328
CVE ID: CVE-2020-7325 State: PUBLISHED Published: 2020-09-09T09:45:16.022661Z Last Updated: 2024-09-17T01:46:26.348Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: McAfee LLC Products: MVISION Endpoint Problem Types: CWE-59 Description: Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10328
CVE ID: CVE-2020-7326 State: PUBLISHED Published: 2020-10-15T09:45:15.247748Z Last Updated: 2024-09-16T20:06:42.817Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Active Response Problem Types: CWE-290 Description: Improperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MAR failing open rather than closed Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10331
CVE ID: CVE-2020-7327 State: PUBLISHED Published: 2020-10-15T09:50:13.724460Z Last Updated: 2024-09-17T00:00:37.940Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: McAfee,LLC Products: McAfee MVISION Endpoint Detection and Response Problem Types: CWE-290 Description: Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client (MVEDR) prior to 3.2.0 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MVEDR failing open rather than closed Additional Analyst Notes: - CVE Program Container: References: - https://kc.
ng in MVEDR failing open rather than closed Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10331