PT-2020-19564 · Mcafee+1 · Mcafee Virusscan Enterprise+1

Published 2020-12-09 · Updated 2020-12-10 · CVE-2020-7337

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions prior to 8.8 Patch 16

Description The issue allows local administrators to bypass local security protection through McAfee VirusScan Enterprise not correctly integrating with Windows Defender Application Control. This is achieved via careful manipulation of the Code Integrity checks.

Recommendations For versions prior to 8.8 Patch 16, update to 8.8 Patch 16 or later to resolve the issue. As a temporary workaround, consider restricting access to the Code Integrity checks until a patch is applied.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-7337

Affected Products

Mcafee Virusscan Enterprise

Windows Defender Application Control

References · 25

• https://nvd.nist.gov/vuln/detail/CVE-2020-7337 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7337 · Vendor Advisory
• https://t.me/cibsecurity/17603 · Telegram Post
• https://t.me/cibsecurity/17894 · Telegram Post
• https://t.me/cibsecurity/17720 · Telegram Post
• https://t.me/cibsecurity/17972 · Telegram Post
• https://t.me/cvenotify/6802 · Telegram Post
• https://t.me/cibsecurity/17661 · Telegram Post
• https://t.me/cibsecurity/17681 · Telegram Post
• https://t.me/cibsecurity/17623 · Telegram Post
• https://t.me/cibsecurity/17797 · Telegram Post
• https://t.me/cibsecurity/17952 · Telegram Post
• https://t.me/cibsecurity/17855 · Telegram Post
• https://kc.mcafee.com/corporate/index?page=content&id=SB10338 · Note
• https://t.me/cibsecurity/17583 · Telegram Post