CVE-2020-7282
Privilege Escalation vulnerability in McAfee Total Protection (MTP)
- State
- Published
- Severity
- 7.5 High
- Published
- Jul 3, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jan 21, 2020
Description
Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H | trellix |
Weaknesses
- CWE-59 Improper Link Resolution Before File Access ('Link Following')
Affected Products
| Product | Versions |
|---|---|
McAfee Total Protection (MTP)McAfee,LLC |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.