File and Removable Media Protection update fixes one vulnerability
CVE-2020-7316
6.6MEDIUM
Key Information
- Vendor
- Mcafee
- Status
- File & Removable Media Protection (frp)
- Vendor
- CVE Published:
- 7 October 2020
Summary
Unquoted service path vulnerability in McAfee File and Removable Media Protection (FRP) prior to 5.3.0 allows local users to execute arbitrary code, with higher privileges, via execution and from a compromised folder. This issue may result in files not being encrypted when a policy is triggered.
Affected Version(s)
File & Removable Media Protection (FRP) < 5.3.0
References
CVSS V3.1
Score:
6.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database