Read the docs
TI-2020-05927 Aliases CVE-2020-7324GHSA-mf95-6qmf-q4f9

Improper Access Control vulnerability in MVISION Endpoint

Priority LOW 27CWE-269Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
None · Low · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-269.

Summary

Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass security mechanisms and deny access to the SYSTEM folder via incorrectly applied permissions.

Why it matters now

EPSS 0.00254 17th percentileScored 2026-11-07
Fix Fixed MVISION Endpoint (McAfee LLC): 20.9

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
McAfeeMVISION Endpoint20.x to before 20.920.9Patch availableCNA
  • MVISION Endpoint VendorMcAfee Affected 20.x to before 20.9 Fixed in 20.9 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mcafee:mvision_endpoint:*:*:*:*:*:*:*:*before 20.9VulnerableMcAfee
  • cpe:2.3:a:mcafee:mvision_endpoint:*:*:*:*:*:*:*:* Versions before 20.9 Vulnerable ·McAfee

Remediation

  • Fix · CNA MVISION Endpoint (McAfee LLC) Fixed in 20.9

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    McAfee MVISION Endpoint 20.9

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2020-05928 Privilege Escalation vulnerability in MVISION EndpointPriority LOW 34
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-7324
  2. 2026-10-03 Alias added: GHSA-mf95-6qmf-q4f9

References

Other 1

  • TI-2020-05931 Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension CVSS 3.1HIGH 7.2
  • TI-2020-05932 Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension CVSS 3.1HIGH 7.2
  • TI-2020-05928 Privilege Escalation vulnerability in MVISION Endpoint CVSS 3.1HIGH 7.8
  • TI-2020-05890 Privilege Escalation vulnerability in MVISION Endpoint CVSS 3.1HIGH 7.8
  • TI-2019-02648 Improper authentication in McAfee MVision Endpoint CVSS 3.0HIGH 7.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences