CVE-2020-7283: Privilege Escalation vulnerability in McAfee Total Protection (MTP)
First published: Fri Jul 03 2020(Updated: )
Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to. This is achieved through running a malicious script or program on the target machine.
Credit: psirt@mcafee.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mcafee Total Protection | <16.0.r26 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this McAfee Total Protection vulnerability?
The vulnerability ID of this McAfee Total Protection vulnerability is CVE-2020-7283.
What is the severity level of CVE-2020-7283?
The severity level of CVE-2020-7283 is high.
How does this vulnerability in McAfee Total Protection allow privilege escalation?
This vulnerability in McAfee Total Protection allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to.
What can an attacker achieve by exploiting CVE-2020-7283?
By exploiting CVE-2020-7283, an attacker can execute malicious scripts or programs on the target machine, enabling them to escalate their privileges.
What version of McAfee Total Protection is affected by this vulnerability?
The vulnerability affects McAfee Total Protection versions before 16.0.R26.
How can I fix the vulnerability in McAfee Total Protection?
To fix the vulnerability in McAfee Total Protection, update to version 16.0.R26 or later.
Where can I find more information about CVE-2020-7283?
You can find more information about CVE-2020-7283 at the following link: [McAfee Service Portal](https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103062)
What are the Common Weakness Enumeration (CWE) categories associated with this vulnerability?
The Common Weakness Enumeration (CWE) categories associated with this vulnerability are CWE-269 and CWE-274.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/last-modified-date
- agent/title
- agent/severity
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/mcafee
- canonical/mcafee total protection