{"id":"CVE-2020-7273","state":"PUBLISHED","title":"Autorun registry bypass","description":"Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters.","publishedAt":"2020-04-15T11:35:14.363Z","updatedAt":"2024-09-16T16:32:41.543Z","severity":{"score":6.7,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:H","source":"trellix"},"assigner":"trellix","products":["McAfee LLC McAfee Endpoint Security (ENS)"],"affected":[{"vendor":"McAfee LLC","product":"McAfee Endpoint Security (ENS)","versions":[{"version":"10.x","status":"affected","lessThan":"10.7.0 April 2020 Update","versionType":"custom"}]}],"references":["https://kc.mcafee.com/corporate/index?page=content&id=SB10309"],"weaknesses":["CWE-269"],"ingestedAt":"2026-10-29T19:47:41.446Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/7xxx/CVE-2020-7273.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-7273","state":"PUBLISHED","datePublished":"2020-04-15T11:35:14.363Z","dateUpdated":"2024-09-16T16:32:41.543Z","assignerShortName":"trellix","assignerOrgId":"01626437-bf8f-4d1c-912a-893b5eb04808","dateReserved":"2020-01-21T00:00:00.000Z"},"containers":{"cna":{"title":"Autorun registry bypass","descriptions":[{"lang":"en","value":"Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters."}],"affected":[{"vendor":"McAfee LLC","product":"McAfee Endpoint Security (ENS)","versions":[{"version":"10.x","status":"affected","lessThan":"10.7.0 April 2020 Update","versionType":"custom"}]}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10309","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-269","description":"CWE-269 Improper Privilege Management","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"trellix","dateUpdated":"2020-04-15T11:35:14.000Z","orgId":"01626437-bf8f-4d1c-912a-893b5eb04808"},"credits":[{"lang":"en","value":"McAfee credits Dávid Müller for reporting this flaw"}],"datePublic":"2020-04-14T00:00:00.000Z","source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@mcafee.com","DATE_PUBLIC":"2020-04-14T00:00:00.000Z","ID":"CVE-2020-7273","STATE":"PUBLIC","TITLE":"Autorun registry bypass"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"McAfee Endpoint Security (ENS)","version":{"version_data":[{"version_affected":"<","version_name":"10.x","version_value":"10.7.0 April 2020 Update"}]}}]},"vendor_name":"McAfee LLC"}]}},"credit":[{"lang":"eng","value":"McAfee credits Dávid Müller for reporting this flaw"}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:H","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-269 Improper Privilege Management"}]}]},"references":{"reference_data":[{"name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10309","refsource":"CONFIRM","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10309"}]},"source":{"discovery":"EXTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10309","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T09:25:48.957Z"}}]}}}