CVE-2021-31843

HIGH

7.3

Descricao

Improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended location.

Detalhes CVE

Pontuacao CVSS v3.17.3

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioREQUIRED

Publicado9/17/2021

Ultima modificacao2/24/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

mcafee:endpoint_security

Fraquezas (CWE)

CWE-59CWE-59

Referencias

https://kc.mcafee.com/corporate/index?page=content&id=SB10367(trellixpsirt@trellix.com)

https://kc.mcafee.com/corporate/index?page=content&id=SB10367(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.