CVE-2021-31839: falha de média gravidade em McAfee Agent for Windows
Incorrect permissions on McAfee Agent for Windows event folder
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8epss 0.2%
Improper privilege management vulnerability in McAfee Agent for Windows prior to 5.7.3 allows a local user to modify event information in the MA event folder. This allows a local user to either add false events or remove events from the event logs prior to them being sent to the ePO server.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Produtos afetados
McAfee,LLC · McAfee Agent for WindowsCVEs relacionadas — McAfee Agent for Windows
No mesmo produto, das mais perigosas para as menos.
CVE-2022-0166HIGHPrivilege escalation vulnerability in McAfee AgentEPSS 2.9%CVE-2021-31854HIGHCode injection vulnerability in McAfee AgentEPSS 1.0%CVE-2021-31847HIGHImproper privilege management in repair process of MA for WindowsEPSS 0.4%CVE-2021-31840HIGHDLL preload vulnerability in McAfee Agent for WindowsEPSS 0.3%CVE-2022-1256HIGHImproper Privilege Management in McAfee Agent for WindowsEPSS 0.3%CVE-2021-31841HIGHDLL side loading vulnerability in MA for WindowsEPSS 0.2%