{"id":"CVE-2020-7311","aliases":["EUVD-2020-28438","GHSA-fjmh-g39v-6932"],"status":"published","title":"Privilege Escalation vulnerability in MA for Windows","description":"Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00279,"percentile":0.2049,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2020-09-10T09:45:21Z","modified":"2026-06-17T03:24:41Z","products":[{"vendor":"mcafee","product":"mcafee_agent"},{"vendor":"mcafee llc","product":"ma for windows"}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10325","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7311"},{"url":"https://github.com/advisories/GHSA-fjmh-g39v-6932"}],"sources":{"cve":[{"id":"CVE-2020-7311","title":"Privilege Escalation vulnerability in MA for Windows","description":"Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files.","status":"published","published":"2020-09-10T09:45:21.474Z","modified":"2024-09-17T01:31:44.215Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:35:58.787905Z"}],"euvd":[{"id":"EUVD-2020-28438","description":"Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files.","status":"published","published":"2020-09-10T09:45:21Z","modified":"2024-09-17T01:31:44Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:48.901339Z"}],"ghsa":[{"id":"GHSA-fjmh-g39v-6932","title":"Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6...","description":"Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files.","status":"published","published":"2022-05-24T17:27:51Z","modified":"2023-01-29T05:04:02Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:45:27.507739Z"}],"nvd":[{"id":"CVE-2020-7311","description":"Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files.","status":"published","published":"2020-09-10T10:15:10.967Z","modified":"2026-06-17T03:24:41.977Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:06:14.981587Z"}]}}