CVE-2020-7254: Privilege escalation in Advanced Threat Defense
Published Mar 12, 2020
·Updated
Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.
Affected Software
1 affected component
Mcafee Advanced Threat Defense>=4.0<4.8.2
Event History
Mar 12, 2020
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for the Privilege Escalation vulnerability in McAfee Advanced Threat Defense?
The vulnerability ID for the Privilege Escalation vulnerability in McAfee Advanced Threat Defense is CVE-2020-7254.
2
What is the severity of CVE-2020-7254?
The severity of CVE-2020-7254 is high (7.8).
3
How does the Privilege Escalation vulnerability in McAfee Advanced Threat Defense occur?
The Privilege Escalation vulnerability in McAfee Advanced Threat Defense occurs due to improper access controls on the sudo command.
4
What is the affected software for CVE-2020-7254?
The affected software for CVE-2020-7254 is McAfee Advanced Threat Defense 4.x prior to 4.8.2.
5
Is there a fix available for CVE-2020-7254?
Yes, a fix for CVE-2020-7254 is available in McAfee Advanced Threat Defense version 4.8.2 and onwards.