CVE-2021-31843

Improper access control vulnerability in McAfee ENS for Windows

State: Published
Severity: 7.3 High
Published: Sep 17, 2021
Updated: Aug 3, 2024
Reserved: Apr 27, 2021

Description

Improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended location.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H	trellix

Weaknesses

CWE-59 Improper Link Resolution Before File Access ('Link Following')

Affected Products

Product	Versions
McAfee Endpoint Security (ENS) for WIndowsMcAfee,LLC	before 10.7.0 September 2021 UpdateAffected

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10367

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.