CVE-2021-23882: falha de alta gravidade em McAfee LLC Endpoint Security (ENS) for Windows
Improper Access Control in the ENS installer
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.2epss 0.3%
Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. This is only applicable to clean installations of ENS as the Access Control rules will prevent modification prior to up an upgrade.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
McAfee LLC · Endpoint Security (ENS) for WindowsCVEs relacionadas — McAfee LLC Endpoint Security (ENS) for Windows
No mesmo produto, das mais perigosas para as menos.
CVE-2021-23881MEDIUMStored Cross Site Scripting in ENSEPSS 0.6%CVE-2021-23878HIGHClear text storage of sensitive Information in ENSEPSS 0.6%CVE-2021-23880MEDIUMImproper Access Control in the ENS installerEPSS 0.3%CVE-2021-23883MEDIUMNull Pointer Dereference vulnerability in McAfee Endpoint Security (ENS)EPSS 0.3%