CVE-2021-31843CWE-59

Improper access control vulnerability in McAfee ENS for Windows

High · published September 17, 2021

CVSS v3.1
7.3
EPSS
0%
Percentile
22.6
In the wild
Unconfirmed
What it is

Improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended location.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.6th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2021-09-17T13:40Z
EPSS history
Timeline
  • 17 SEP 13:40Z
    Improper access control vulnerability in McAfee ENS for Windows
    cvelistv5