CVE-2020-7280

mcafee virusscan enterprise

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-7280

Katalog CVE

CVSS 7.8 · High EPSS 0,40%

Kerentanan Improper Privilege Management pada mcafee virusscan enterprise. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing dependent.

Rincian

Terbit di NVD
10 Juni 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-269: Improper Privilege Management
EPSS (30 hari)
0,40% peluang dieksploitasi; lebih tinggi dari 32,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
mcafee virusscan enterprise Versi 8.8
mcafee virusscan enterprise Versi 8.8 patch1
mcafee virusscan enterprise Versi 8.8 patch10
mcafee virusscan enterprise Versi 8.8 patch11
mcafee virusscan enterprise Versi 8.8 patch12
mcafee virusscan enterprise Versi 8.8 patch13
mcafee virusscan enterprise Versi 8.8 patch14
mcafee virusscan enterprise Versi 8.8 patch2
mcafee virusscan enterprise Versi 8.8 patch3
mcafee virusscan enterprise Versi 8.8 patch4
mcafee virusscan enterprise Versi 8.8 patch5
mcafee virusscan enterprise Versi 8.8 patch6
mcafee virusscan enterprise Versi 8.8 patch7
mcafee virusscan enterprise Versi 8.8 patch8
mcafee virusscan enterprise Versi 8.8 patch9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.