Unrated severityNVD Advisory· Published Apr 15, 2020· Updated Sep 17, 2024

Unrestricted Policy Management using MfeUpgradeTool.exe

CVE-2020-7276

Description

Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator users to access policy settings via running this tool.

Affected products

McAfee/Endpoint Security (ENS) for Windowsllm-fuzzy
Range: <10.7.0.1017
McAfee LLC/McAfee Endpoint Security (ENS)v5
Range: 10.x

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

kc.mcafee.com/corporate/indexmitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000