{"id":"CVE-2020-7343","aliases":["EUVD-2020-28470","GHSA-v42c-5jq2-7p9m"],"status":"published","title":"Improper Authorization vulnerability in MA","description":"Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00358,"percentile":0.29809,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2021-01-18T12:15:19Z","modified":"2026-06-17T03:24:44Z","products":[{"vendor":"mcafee","product":"agent"},{"vendor":"mcafee, llc","product":"mcafee agent"},{"vendor":"mcafee,llc","product":"mcafee agent"}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10343","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7343"},{"url":"https://github.com/advisories/GHSA-v42c-5jq2-7p9m"}],"sources":{"cve":[{"id":"CVE-2020-7343","title":"Improper Authorization vulnerability in MA","description":"Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files.","status":"published","published":"2021-01-18T12:15:19.338Z","modified":"2024-09-17T03:47:52.262Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:35:58.331892Z"}],"euvd":[{"id":"EUVD-2020-28470","description":"Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files.","status":"published","published":"2021-01-18T12:15:19Z","modified":"2024-09-17T03:47:52Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:28:29.042248Z"}],"ghsa":[{"id":"GHSA-v42c-5jq2-7p9m","title":"Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local...","description":"Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files.","status":"published","published":"2022-05-24T17:39:24Z","modified":"2023-11-16T03:30:18Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:55:02.891904Z"}],"nvd":[{"id":"CVE-2020-7343","description":"Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files.","status":"published","published":"2021-01-18T13:15:13.417Z","modified":"2026-06-17T03:24:44.733Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:06:30.596418Z"}]}}