CVE-2020-7267: Privilege Escalation vulnerability through symbolic links in VSEL
Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-7267?
The severity of CVE-2020-7267 is high with a severity value of 8.4.
How can local users exploit CVE-2020-7267?
Local users can exploit CVE-2020-7267 by manipulating symbolic links to redirect a McAfee delete action to unintended files.
Which version of McAfee VirusScan Enterprise for Linux is affected by CVE-2020-7267?
McAfee VirusScan Enterprise for Linux prior to version 2.0.3 Hotfix 2635000 is affected by CVE-2020-7267.
How can I fix CVE-2020-7267?
To fix CVE-2020-7267, update McAfee VirusScan Enterprise for Linux to version 2.0.3 Hotfix 2635000.
Where can I find more information about CVE-2020-7267?
You can find more information about CVE-2020-7267 at the following link: [McAfee Security Bulletin SB10316](https://kc.mcafee.com/corporate/index?page=content&id=SB10316).