VYPR
← All advisories
Medium severity6.4NVD Advisory· Published Apr 15, 2020· Updated Jun 17, 2026

CVE-2020-7276

CVE-2020-7276

Description

Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator users to access policy settings via running this tool.

Affected products

10
  • McAfee LLC/McAfee Endpoint Security (ENS)v5
    Range: 10.x
  • McAfee/Endpoint Securityllm-fuzzy8 versions
    <10.7.0 April 2020 Update+ 7 more
    • (no CPE)range: <10.7.0 April 2020 Update
    • cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.1:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.2:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.3:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.4:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:windows:*:*
  • McAfee/MfeUpgradeToolllm-create
    Range: <10.7.0 April 2020 Update

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.