CVE-2020-7267

Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
trellixCNA
8.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 8%
VendorProductVersion
mcafeevirusscan_enterprise
8.8
mcafeevirusscan_enterprise
8.8:patch1
mcafeevirusscan_enterprise
8.8:patch10
mcafeevirusscan_enterprise
8.8:patch11
mcafeevirusscan_enterprise
8.8:patch12
mcafeevirusscan_enterprise
8.8:patch13
mcafeevirusscan_enterprise
8.8:patch2
mcafeevirusscan_enterprise
8.8:patch3
mcafeevirusscan_enterprise
8.8:patch4
mcafeevirusscan_enterprise
8.8:patch5
mcafeevirusscan_enterprise
8.8:patch6
mcafeevirusscan_enterprise
8.8:patch7
mcafeevirusscan_enterprise
8.8:patch8
mcafeevirusscan_enterprise
8.8:patch9
𝑥
= Vulnerable software versions