VYPR
← All advisories
Medium severity6.4NVD Advisory· Published Apr 15, 2020· Updated Jun 17, 2026

CVE-2020-7276

CVE-2020-7276

Description

Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator users to access policy settings via running this tool.

Affected products

10
  • McAfee/Endpoint Security8 versions
    cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*+ 7 more
    • cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.1:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.2:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.3:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.4:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:windows:*:*
    • (no CPE)range: <10.7.0 April 2020 Update
  • McAfee LLC/McAfee Endpoint Security (ENS)v5
    Range: 10.x
  • McAfee/MfeUpgradeToolllm-create
    Range: <10.7.0 April 2020 Update

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.