{"id":"CVE-2020-7254","aliases":["EUVD-2020-28381","GHSA-3r2j-2m96-x2cp"],"status":"published","title":"Privilege escalation in Advanced Threat Defense","description":"Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.","severity":{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.003,"percentile":0.22991,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264","CWE-269"],"published":"2020-03-12T11:00:18Z","modified":"2026-06-17T03:24:36Z","products":[{"vendor":"mcafee","product":"advanced_threat_defense"},{"vendor":"mcafee, llc","product":"mcafee advanced threat defense (atd)"},{"vendor":"mcafee,llc","product":"mcafee advanced threat defense (atd)"}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10311","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7254"},{"url":"https://github.com/advisories/GHSA-3r2j-2m96-x2cp"}],"sources":{"cve":[{"id":"CVE-2020-7254","title":"Privilege escalation in Advanced Threat Defense","description":"Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.","status":"published","published":"2020-03-12T11:00:18.459Z","modified":"2024-09-16T20:37:10.544Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-264","CWE-269"],"updated_at":"2026-11-02T14:35:58.331892Z"}],"euvd":[{"id":"EUVD-2020-28381","description":"Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.","status":"published","published":"2020-03-12T11:00:18Z","modified":"2024-09-16T20:37:10Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:12.113193Z"}],"ghsa":[{"id":"GHSA-3r2j-2m96-x2cp","title":"Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat...","description":"Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.","status":"published","published":"2022-05-24T17:11:20Z","modified":"2023-01-29T05:01:47Z","updated_at":"2026-11-02T14:44:54.907829Z"}],"nvd":[{"id":"CVE-2020-7254","description":"Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.","status":"published","published":"2020-03-12T11:15:12.813Z","modified":"2026-06-17T03:24:36.017Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264","CWE-269"],"updated_at":"2026-11-02T14:05:55.32877Z"}]}}