Read the docs
TI-2020-05928 Aliases CVE-2020-7325GHSA-p443-fjqf-h82p

Privilege Escalation vulnerability in MVISION Endpoint

Priority LOW 34CWE-59Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file.

Why it matters now

EPSS 0.00327 25th percentileScored 2026-11-07
Fix Fixed MVISION Endpoint (McAfee LLC): 20.9

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
McAfeeMVISION Endpoint20.x to before 20.920.9Patch availableCNA
  • MVISION Endpoint VendorMcAfee Affected 20.x to before 20.9 Fixed in 20.9 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mcafee:mvision_endpoint:*:*:*:*:*:*:*:*before 20.9VulnerableMcAfee
  • cpe:2.3:a:mcafee:mvision_endpoint:*:*:*:*:*:*:*:* Versions before 20.9 Vulnerable ·McAfee

Remediation

  • Fix · CNA MVISION Endpoint (McAfee LLC) Fixed in 20.9

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    McAfee MVISION Endpoint 20.9

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2020-05927 Improper Access Control vulnerability in MVISION EndpointPriority LOW 27
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-7325
  2. 2026-10-03 Alias added: GHSA-p443-fjqf-h82p

References

Other 1

  • TI-2020-05931 Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension CVSS 3.1HIGH 7.2
  • TI-2020-05932 Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension CVSS 3.1HIGH 7.2
  • TI-2020-05890 Privilege Escalation vulnerability in MVISION Endpoint CVSS 3.1HIGH 7.8
  • TI-2019-02648 Improper authentication in McAfee MVision Endpoint CVSS 3.0HIGH 7.4
  • TI-2020-05927 Improper Access Control vulnerability in MVISION Endpoint CVSS 3.1MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences