VULNERABILITY INTELLIGENCE
CVE-2020-7319
CVSS score8.8 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2020-09-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file.
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')