CVE-2020-7343: 
Trellix Agent vulnerability analysis and mitigation

A Missing Authorization vulnerability (CVE-2020-7343) was identified in McAfee Agent (MA) for Windows versions prior to 5.7.1. The vulnerability was discovered and recorded on January 21, 2020. This security flaw affects McAfee Agent installations on Windows systems (CVE Mitre).

The vulnerability is classified as a Missing Authorization issue (CWE-862) that affects the McAfee Agent's update mechanism. The flaw exists in the way MA handles temporary files directory permissions, which could be exploited by local users (CVE Mitre).

If exploited, this vulnerability allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. As a result, the McAfee product would continue to function but with out-of-date detection files, potentially leaving the system vulnerable to new threats (CVE Mitre).

The vulnerability requires local access to the affected system to exploit. An attacker would need to have the ability to manipulate directories on the target system to successfully exploit this vulnerability (CVE Mitre).

The vulnerability has been addressed in McAfee Agent version 5.7.1 and later. Users are advised to upgrade to the latest version of McAfee Agent to mitigate this security issue (CVE Mitre).