CVE-2020-7337: Incorrect Permission Assignment for Critical Resource
First published: Wed Dec 09 2020(Updated: )
Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of the Code Integrity checks.
Credit: psirt@mcafee.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mcafee Virusscan Enterprise | <8.8 | |
| Mcafee Virusscan Enterprise | =8.8 | |
| Mcafee Virusscan Enterprise | =8.8-patch1 | |
| Mcafee Virusscan Enterprise | =8.8-patch10 | |
| Mcafee Virusscan Enterprise | =8.8-patch11 | |
| Mcafee Virusscan Enterprise | =8.8-patch12 | |
| Mcafee Virusscan Enterprise | =8.8-patch13 | |
| Mcafee Virusscan Enterprise | =8.8-patch14 | |
| Mcafee Virusscan Enterprise | =8.8-patch15 | |
| Mcafee Virusscan Enterprise | =8.8-patch2 | |
| Mcafee Virusscan Enterprise | =8.8-patch3 | |
| Mcafee Virusscan Enterprise | =8.8-patch4 | |
| Mcafee Virusscan Enterprise | =8.8-patch5 | |
| Mcafee Virusscan Enterprise | =8.8-patch6 | |
| Mcafee Virusscan Enterprise | =8.8-patch7 | |
| Mcafee Virusscan Enterprise | =8.8-patch8 | |
| Mcafee Virusscan Enterprise | =8.8-patch9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this McAfee VirusScan Enterprise vulnerability?
The vulnerability ID for this McAfee VirusScan Enterprise vulnerability is CVE-2020-7337.
What is the severity level of CVE-2020-7337?
CVE-2020-7337 has a severity level of medium.
Which version of McAfee VirusScan Enterprise is affected by CVE-2020-7337?
McAfee VirusScan Enterprise versions prior to 8.8 Patch 16 are affected by CVE-2020-7337.
How can local administrators bypass security protection with CVE-2020-7337?
Local administrators can bypass security protection by carefully manipulating McAfee VirusScan Enterprise to not correctly integrate with Windows Defender Application Control.
Where can I find more information about CVE-2020-7337?
You can find more information about CVE-2020-7337 on the McAfee Knowledge Center website.
- agent/type
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/author
- agent/description
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/title
- agent/event
- agent/tags
- agent/first-publish-date
- vendor/mcafee
- canonical/mcafee virusscan enterprise
- version/mcafee virusscan enterprise/8.8
- version/mcafee virusscan enterprise/8.8-patch1
- version/mcafee virusscan enterprise/8.8-patch10
- version/mcafee virusscan enterprise/8.8-patch11
- version/mcafee virusscan enterprise/8.8-patch12
- version/mcafee virusscan enterprise/8.8-patch13
- version/mcafee virusscan enterprise/8.8-patch14
- version/mcafee virusscan enterprise/8.8-patch15
- version/mcafee virusscan enterprise/8.8-patch2
- version/mcafee virusscan enterprise/8.8-patch3
- version/mcafee virusscan enterprise/8.8-patch4
- version/mcafee virusscan enterprise/8.8-patch5
- version/mcafee virusscan enterprise/8.8-patch6
- version/mcafee virusscan enterprise/8.8-patch7
- version/mcafee virusscan enterprise/8.8-patch8
- version/mcafee virusscan enterprise/8.8-patch9