CVE-2020-7255: Privilege Escalation vulnerability in ENS
Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to gain elevated privileges via ENS not checking user permissions when editing configuration in the ENS client interface. Administrators can lock the ENS client interface through ePO to prevent users being able to edit the configuration.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-7255?
CVE-2020-7255 is a privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update.
How does CVE-2020-7255 affect McAfee Endpoint Security?
CVE-2020-7255 affects McAfee Endpoint Security versions 10.5.0 to 10.6.0 for Windows.
What is the severity of CVE-2020-7255?
CVE-2020-7255 has a severity rating of 4.4 (medium).
How can an attacker exploit CVE-2020-7255?
An attacker can exploit CVE-2020-7255 by using the administrative user interface in McAfee Endpoint Security to gain elevated privileges.
How can I fix CVE-2020-7255?
To fix CVE-2020-7255, update McAfee Endpoint Security to version 10.7.0 February 2020 Update or later.