CVE-2020-7323
Summary
| CVE | CVE-2020-7323 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-09-09 10:15:00 UTC |
| Updated | 2023-11-07 03:26:00 UTC |
| Description | Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running with elevated privileges. This issue is timing dependent and requires physical access to the machine. |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mcafee | Endpoint Security | All | All | All | All |
| Application | Mcafee | Endpoint Security | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| McAfee Security Bulletin - Endpoint Security for Windows update fixes four vulnerabilities (CVE-2020-7319, CVE-2020-7320, CVE-2020-7322, and CVE-2020-7323) | kc.mcafee.com | ||
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: McAfee credits Lockheed Martin Red Team for responsibly reporting this flaw.
There are currently no legacy QID mappings associated with this CVE.