PT-2020-19544 · Mcafee · Mcafee Agent For Windows

Published 2020-09-10 · Updated 2022-06-01 · CVE-2020-7311

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Agent for Windows versions prior to 5.6.6

Description A privilege escalation issue exists in the installer of McAfee Agent for Windows, allowing local users to gain SYSTEM rights during installation by manipulating log files.

Recommendations For versions prior to 5.6.6, update to version 5.6.6 or later to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-7311

Affected Products

Mcafee Agent For Windows

References · 3

• https://osv.dev/vulnerability/CVE-2020-7311 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7311 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10325 · Note