CVE-2021-23882: fallo de gravedad alta en McAfee LLC Endpoint Security (ENS) for Windows
Improper Access Control in the ENS installer
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.2epss 0.3%
Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. This is only applicable to clean installations of ENS as the Access Control rules will prevent modification prior to up an upgrade.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Productos afectados
McAfee LLC · Endpoint Security (ENS) for WindowsCVEs relacionadas — McAfee LLC Endpoint Security (ENS) for Windows
En el mismo producto, de las más peligrosas a las menos.
CVE-2021-23881MEDIUMStored Cross Site Scripting in ENSEPSS 0.6%CVE-2021-23878HIGHClear text storage of sensitive Information in ENSEPSS 0.6%CVE-2021-23880MEDIUMImproper Access Control in the ENS installerEPSS 0.3%CVE-2021-23883MEDIUMNull Pointer Dereference vulnerability in McAfee Endpoint Security (ENS)EPSS 0.3%