CVE-2020-7252

CWE-250CWE-4283 documents3 sources
Severity
5.5MEDIUM
EPSS
0.2%
top 62.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mcafee, LLC Data Exchange Layer (dxl) BrokerMcafee Data Exchange Layer
Timeline
PublishedFeb 17
Latest updateMay 24

Description

Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:HExploitability: 0.6 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-432g-39xc-whrc: Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6↗2022-05-24
▶
CVEList
Unquoted service executable path↗2020-02-17
▶
CVE-2020-7252 (MEDIUM CVSS 5.5) | Unquoted service executable path in | cvebase.io