CVE-2021-31839 MEDIUM

CVE-2021-31839: Incorrect permissions on McAfee Agent for Windows event folder

Vendor Mcafee,Llc
Product McAfee Agent for Windows
Weakness CWE-269
Published June 10, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Improper privilege management vulnerability in McAfee Agent for Windows prior to 5.7.3 allows a local user to modify event information in the MA event folder. This allows a local user to either add false events or remove events from the event logs prior to them being sent to the ePO server.

Key dates

02Disclosure timeline

June 10, 2021 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-23537 Apache Fineract: Under certain circumstances, this vulnerability allowed users, without specific permissions, to escalate their privileges to any role. CVE-2024-5907 Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability CVE-2023-51356 WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerability CVE-2021-1400 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Vulnerabilities CVE-2023-7343 Belden Industrial HiVision Arbitrary Code Execution via Malicious Project File