CVE-2020-7281: Privilege Escalation vulnerability in McAfee Total Protection (MTP)
Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-7281?
The severity of CVE-2020-7281 is high with a CVSS score of 6.3.
How does the Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 work?
The Privilege Escalation vulnerability allows local users to delete files they would not have access to by manipulating symbolic links to redirect a McAfee delete action to an unintended file.
How can I fix the Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26?
Update McAfee Total Protection to version 16.0.R26 or later to fix the Privilege Escalation vulnerability.
Where can I find more information about CVE-2020-7281?
More information about CVE-2020-7281 can be found at the following reference link: https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103062.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2020-7281?
CVE-2020-7281 is associated with CWE-269.