CVE-2021-31843: Improper access control vulnerability in McAfee ENS for Windows

Q: What is CVE-2021-31843?

CVE-2021-31843 is an improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to version 10.7.0.

Q: How does CVE-2021-31843 affect McAfee Endpoint Security?

CVE-2021-31843 allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended location.

Q: What is the severity of CVE-2021-31843?

CVE-2021-31843 has a severity rating of 7.8 (high).

Q: Which software versions are affected by CVE-2021-31843?

CVE-2021-31843 affects McAfee Endpoint Security Windows versions prior to 10.7.0.

Q: How can I fix CVE-2021-31843?

To fix CVE-2021-31843, update McAfee Endpoint Security Windows to version 10.7.0 or later.

Published Sep 17, 2021

Updated

Improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended location.

Affected Software

10 affected components

McAfee Endpoint Security Windows<10.7.0

McAfee Endpoint Security Windows=10.7.0

McAfee Endpoint Security Windows=10.7.0-april_2020

McAfee Endpoint Security Windows=10.7.0-april_2021

McAfee Endpoint Security Windows=10.7.0-february_2020

McAfee Endpoint Security Windows=10.7.0-february_2021

McAfee Endpoint Security Windows=10.7.0-july_2020

McAfee Endpoint Security Windows=10.7.0-june_2021

McAfee Endpoint Security Windows=10.7.0-november_2020

McAfee Endpoint Security Windows=10.7.0-september_2020

Remediation

Patch Available

https://kc.mcafee.com/corporate/index?page=content&id=SB10367

Event History

Sep 17, 2021

CVE Published

via MITRE·01:40 PM

Data Sourced

via MITRE·01:40 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2021-31843?

CVE-2021-31843 is an improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to version 10.7.0.

How does CVE-2021-31843 affect McAfee Endpoint Security?

CVE-2021-31843 allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended location.

What is the severity of CVE-2021-31843?