Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2020-7276

Unrestricted Policy Management using MfeUpgradeTool.exe

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator users to access policy settings via running this tool.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee LLC McAfee Endpoint Security (ENS)

  • 10.x to < 10.7.0 April 2020 Updateaffected

References