Privilege Escalation vulnerability through symbolic links in VSEL
Priority LOW 38CWE-274Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-269.
Summary
Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.
Why it matters now
EPSS 0.00261 17th percentileScored 2026-11-07
Fix Fixed McAfee VirusScan Enterprise (VSE) for Linux (McAfee,LLC): 2.0.3 Hotfix 2635000
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| McAfee | McAfee VirusScan Enterprise (VSE) for Linux | 2.0.x to before 2.0.3 Hotfix 2635000 | 2.0.3 Hotfix 2635000 | Patch available | CNA |
- McAfee VirusScan Enterprise (VSE) for Linux VendorMcAfee Affected 2.0.x to before 2.0.3 Hotfix 2635000 Fixed in 2.0.3 Hotfix 2635000 Patch available CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:-:*:*:*:windows:*:* | 8.8 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch1:*:*:*:windows:*:* | 8.8 patch1 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch10:*:*:*:windows:*:* | 8.8 patch10 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch11:*:*:*:windows:*:* | 8.8 patch11 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch12:*:*:*:windows:*:* | 8.8 patch12 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch13:*:*:*:windows:*:* | 8.8 patch13 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch2:*:*:*:windows:*:* | 8.8 patch2 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch3:*:*:*:windows:*:* | 8.8 patch3 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch4:*:*:*:windows:*:* | 8.8 patch4 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch5:*:*:*:windows:*:* | 8.8 patch5 | Vulnerable | McAfee |
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:-:*:*:*:windows:*:* Versions 8.8 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch1:*:*:*:windows:*:* Versions 8.8 patch1 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch10:*:*:*:windows:*:* Versions 8.8 patch10 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch11:*:*:*:windows:*:* Versions 8.8 patch11 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch12:*:*:*:windows:*:* Versions 8.8 patch12 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch13:*:*:*:windows:*:* Versions 8.8 patch13 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch2:*:*:*:windows:*:* Versions 8.8 patch2 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch3:*:*:*:windows:*:* Versions 8.8 patch3 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch4:*:*:*:windows:*:* Versions 8.8 patch4 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch5:*:*:*:windows:*:* Versions 8.8 patch5 Vulnerable ·McAfee
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch6:*:*:*:windows:*:* | 8.8 patch6 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch7:*:*:*:windows:*:* | 8.8 patch7 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch8:*:*:*:windows:*:* | 8.8 patch8 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch9:*:*:*:windows:*:* | 8.8 patch9 | Vulnerable | McAfee |
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch6:*:*:*:windows:*:* Versions 8.8 patch6 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch7:*:*:*:windows:*:* Versions 8.8 patch7 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch8:*:*:*:windows:*:* Versions 8.8 patch8 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch9:*:*:*:windows:*:* Versions 8.8 patch9 Vulnerable ·McAfee
Remediation
- Fix · CNA McAfee VirusScan Enterprise (VSE) for Linux (McAfee,LLC) Fixed in 2.0.3 Hotfix 2635000
Timeline
- 2026-10-02 Threatist record created from CVE-2020-7267
- 2026-10-03 Alias added: GHSA-2f9x-cj33-r657
References
More McAfee Virusscan Enterprise vulnerabilities
- TI-2016-06740 Improper authentication in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 7.5
- TI-2016-06738 Code injection in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 8.0
- TI-2016-06742 HTTP response splitting in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 8.1
- TI-2016-06741 Improper authentication in Intel VirusScan Enterprise Linux CVSS 3.0HIGH 8.1
- TI-2009-04865 Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows… CVSS 2.0HIGH 9.3
- TI-2007-02073 Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch… CVSS 2.0HIGH 7.9
Sources
- CVE-2020-7267 · CVE Program
- CVE-2020-7267 · NVD
- FIRST EPSS
- GHSA-2f9x-cj33-r657 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences