CVE-2021-23880: Improper Access Control in the ENS installer
Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-23880?
CVE-2021-23880 is a vulnerability that allows an authenticated local administrator user to uninstall the anti-malware engine in McAfee Endpoint Security (ENS) for Windows prior to version 10.7.0.
How does CVE-2021-23880 impact McAfee Endpoint Security?
CVE-2021-23880 allows an authenticated local administrator user to uninstall the anti-malware engine in McAfee Endpoint Security.
What is the severity of CVE-2021-23880?
CVE-2021-23880 has a severity rating of medium, with a CVSS score of 4.4.
How can I fix CVE-2021-23880?
To fix CVE-2021-23880, update McAfee Endpoint Security to version 10.7.0 or later.
Where can I find more information about CVE-2021-23880?
More information about CVE-2021-23880 can be found at the following link: [McAfee Security Bulletin SB10345](https://kc.mcafee.com/corporate/index?page=content&id=SB10345)