Skip to main content

Improperly Implemented Security Check for Standard

CVE-2020-7251

Medium
5/10

Summary

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.

  • HIGH
  • LOCAL
  • LOW
  • UNCHANGED
  • REQUIRED
  • LOW
  • HIGH
  • NONE

CWE-358 - Improperly Implemented Security Check for Standard

The software does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.

References

Advisory Timeline

  • Published