CVE-2021-31843: Improper access control vulnerability in McAfee ENS for Windows
First published: Fri Sep 17 2021(Updated: )
Improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended location.
Credit: psirt@mcafee.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mcafee Endpoint Security | <10.7.0 | |
| Mcafee Endpoint Security | =10.7.0 | |
| Mcafee Endpoint Security | =10.7.0-april_2020 | |
| Mcafee Endpoint Security | =10.7.0-april_2021 | |
| Mcafee Endpoint Security | =10.7.0-february_2020 | |
| Mcafee Endpoint Security | =10.7.0-february_2021 | |
| Mcafee Endpoint Security | =10.7.0-july_2020 | |
| Mcafee Endpoint Security | =10.7.0-june_2021 | |
| Mcafee Endpoint Security | =10.7.0-november_2020 | |
| Mcafee Endpoint Security | =10.7.0-september_2020 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-31843?
CVE-2021-31843 is an improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to version 10.7.0.
How does CVE-2021-31843 affect McAfee Endpoint Security?
CVE-2021-31843 allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended location.
What is the severity of CVE-2021-31843?
CVE-2021-31843 has a severity rating of 7.8 (high).
Which software versions are affected by CVE-2021-31843?
CVE-2021-31843 affects McAfee Endpoint Security Windows versions prior to 10.7.0.
How can I fix CVE-2021-31843?
To fix CVE-2021-31843, update McAfee Endpoint Security Windows to version 10.7.0 or later.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/title
- agent/remedy
- agent/tags
- agent/event
- agent/first-publish-date
- agent/description
- vendor/mcafee
- canonical/mcafee endpoint security
- version/mcafee endpoint security/10.7.0
- version/mcafee endpoint security/10.7.0-april_2020
- version/mcafee endpoint security/10.7.0-april_2021
- version/mcafee endpoint security/10.7.0-february_2020
- version/mcafee endpoint security/10.7.0-february_2021
- version/mcafee endpoint security/10.7.0-july_2020
- version/mcafee endpoint security/10.7.0-june_2021
- version/mcafee endpoint security/10.7.0-november_2020
- version/mcafee endpoint security/10.7.0-september_2020