CVE-2021-23880: falha de média gravidade em McAfee LLC Endpoint Security (ENS) for Windows
Improper Access Control in the ENS installer
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.7epss 0.3%
Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
McAfee LLC · Endpoint Security (ENS) for WindowsCVEs relacionadas — McAfee LLC Endpoint Security (ENS) for Windows
No mesmo produto, das mais perigosas para as menos.
CVE-2021-23881MEDIUMStored Cross Site Scripting in ENSEPSS 0.6%CVE-2021-23878HIGHClear text storage of sensitive Information in ENSEPSS 0.6%CVE-2021-23882HIGHImproper Access Control in the ENS installerEPSS 0.3%CVE-2021-23883MEDIUMNull Pointer Dereference vulnerability in McAfee Endpoint Security (ENS)EPSS 0.3%