Read the docs
TI-2020-05861 Aliases CVE-2020-7254GHSA-3r2j-2m96-x2cp

Privilege escalation in Advanced Threat Defense

Priority LOW 34CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass, Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-264 and CWE-269.

Summary

Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.

Why it matters now

EPSS 0.003 22nd percentileScored 2026-11-07
Fix Fixed McAfee Advanced Threat Defense (ATD) (McAfee, LLC): 4.8.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
McAfeeMcAfee Advanced Threat Defense (ATD)4.x to before 4.8.24.8.2Patch availableCNA
  • McAfee Advanced Threat Defense (ATD) VendorMcAfee Affected 4.x to before 4.8.2 Fixed in 4.8.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:*4.0 to before 4.8.2VulnerableMcAfee
  • cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:* Versions 4.0 to before 4.8.2 Vulnerable ·McAfee

Remediation

  • Fix · CNA McAfee Advanced Threat Defense (ATD) (McAfee, LLC) Fixed in 4.8.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-7254
  2. 2026-10-03 Alias added: GHSA-3r2j-2m96-x2cp

References

Other 1

  • TI-2017-03024 OS command injection in McAfee Advanced Threat Defense CVSS 3.0CRITICAL 9.8
  • TI-2017-03023 Missing authentication in McAfee Advanced Threat Defense CVSS 3.0CRITICAL 9.8
  • TI-2019-02698 Advanced Threat Defense (ATD) - Unprotected storage of shared credentials vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2017-03025 Command injection in McAfee Advanced Threat Defense CVSS 3.0HIGH 8.8
  • TI-2017-03027 Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense… CVSS 3.0HIGH 8.8
  • TI-2019-02696 Advanced Threat Defense (ATD) - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVSS 3.1HIGH 8.8
See all 25 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences