PT-2021-19545 · Mcafee · Mcafee Endpoint Security

Published 2021-09-17 · Updated 2026-02-24 · CVE-2021-31843

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security (ENS) Windows versions prior to 10.7.0 September 2021 Update

Description The issue allows local users to access files they would otherwise not have access to by manipulating junction links to redirect McAfee folder operations to an unintended location. This is due to an improper privileges management vulnerability.

Recommendations For versions prior to 10.7.0 September 2021 Update, update to the September 2021 Update or later to resolve the issue. As a temporary workaround, consider restricting access to the McAfee folder operations to minimize the risk of exploitation.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2021-31843

Affected Products

Mcafee Endpoint Security

References · 8

• https://osv.dev/vulnerability/CVE-2021-31843 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31843 · Security Note
• https://t.me/cveNotify/153026 · Telegram Post
• https://kc.mcafee.com/corporate/index?page=content&id=SB10367 · Note
• https://t.me/cvenotify/21701 · Telegram Post
• https://t.me/cibsecurity/29051 · Telegram Post
• https://t.me/cvenotify/21093 · Telegram Post
• https://t.me/cvenotify/40223 · Telegram Post