CVE-2020-7280: McAfee VirusScan Enterprise Junction Privilege Escalation Vulnerability
Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing dependent.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of McAfee VirusScan Enterprise. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of log files. By creating a junction, an attacker can abuse the product to overwrite the contents of a chosen file. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-7280?
CVE-2020-7280 is a vulnerability that allows local attackers to escalate privileges on affected installations of McAfee VirusScan Enterprise.
How severe is CVE-2020-7280?
CVE-2020-7280 is classified as a high severity vulnerability with a CVSS score of 7.8.
What software is affected by CVE-2020-7280?
McAfee VirusScan Enterprise versions 8.8 and its various patches are affected by CVE-2020-7280.
How can CVE-2020-7280 be exploited?
To exploit CVE-2020-7280, an attacker must first obtain the ability to execute low-privileged code on the target system.
Where can I find more information about CVE-2020-7280?
You can find more information about CVE-2020-7280 on the McAfee Knowledge Center website and the Zero Day Initiative website.