cve/2020/CVE-2020-7311.md

### [CVE-2020-7311](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7311)
![](https://img.shields.io/static/v1?label=Product&message=MA%20for%20Windows&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=5.6.x%3C%205.6.6%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-269%3A%20Improper%20Privilege%20Management&color=brighgreen)

### Description

Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files.

### POC

#### Reference
- https://kc.mcafee.com/corporate/index?page=content&id=SB10325
- https://kc.mcafee.com/corporate/index?page=content&id=SB10325

#### Github
- https://github.com/404notf0und/CVE-Flow