Unrestricted Policy Management using MfeUpgradeTool.exe
CVE-2020-7276
6.4MEDIUM
What is CVE-2020-7276?
Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator users to access policy settings via running this tool.
Affected Version(s)
McAfee Endpoint Security (ENS) 10.x < 10.7.0 April 2020 Update