CVE-2021-31839CWE-269

Incorrect permissions on McAfee Agent for Windows event folder

Medium · published June 10, 2021

CVSS v3.1
4.8
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

Improper privilege management vulnerability in McAfee Agent for Windows prior to 5.7.3 allows a local user to modify event information in the MA event folder. This allows a local user to either add false events or remove events from the event logs prior to them being sent to the ePO server.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00182 · 7.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2021-06-10T16:15Z
EPSS history
Timeline
  • 10 JUN 16:15Z
    Incorrect permissions on McAfee Agent for Windows event folder
    cvelistv5