CVE-2020-7281: mcafee total_protection Improper Privilege Management

Vulnerability summary

CVE-2020-7281 is a high (CVSS 7.5) Improper Privilege Management vulnerability in mcafee total_protection. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.1% of scored vulnerabilities.

Timeline

1. 03-07-2020
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

• CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.