CVE-2020-7255: 
Trellix Endpoint Security Agent vulnerability analysis and mitigation

A privilege escalation vulnerability (CVE-2020-7255) was discovered in the administrative user interface of McAfee Endpoint Security (ENS) for Windows versions prior to 10.7.0 February 2020 Update. The vulnerability allows local users to gain elevated privileges through the ENS client interface due to insufficient user permission checks when editing configurations (CVE Mitre, NVD).

The vulnerability exists in the administrative user interface of McAfee Endpoint Security where the application fails to properly validate user permissions when editing configuration settings in the ENS client interface. This security flaw could allow unauthorized users to modify security settings that should be restricted to administrators only (CVE Mitre).

The successful exploitation of this vulnerability could allow local users to gain elevated privileges on the affected system, potentially compromising the security posture of the endpoint (NVD).

McAfee has released version 10.7.0 February 2020 Update to address this vulnerability. As a workaround, administrators can lock the ENS client interface through ePO to prevent users from being able to edit the configuration (McAfee Security Bulletin).