PT-2019-5514 · Mcafee · Mcafee Virusscan Enterprise

Glenn Lloyd · Published 2019-12-27 · Updated 2020-06-17 · CVE-2020-7280

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions prior to 8.8 Patch 15

Description The issue is related to insufficient access control in McAfee VirusScan Enterprise, which can be exploited to elevate privileges. This can occur during daily DAT updates, allowing local users to delete and create files they would not normally have permission to access by altering the target of symbolic links. This exploit is timing-dependent.

Recommendations For versions prior to 8.8 Patch 15, update to 8.8 Patch 15 or later to resolve the issue. As a temporary workaround, consider restricting access to the symbolic links that can be altered during the daily DAT updates until a patch is applied.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2020-03432

CVE-2020-7280

ZDI-20-702

Affected Products

Mcafee Virusscan Enterprise

References · 8

• https://osv.dev/vulnerability/CVE-2020-7280 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7280 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-702 · Security Note
• https://bdu.fstec.ru/vul/2020-03432 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10302 · Note
• https://t.me/cvenotify/4276 · Telegram Post
• https://kc.mcafee.com/corporate/index?page=content&id=SB10302 · Note
• https://securitylab.ru/vulnerability/509232.php · Note