CVE-2021-31843

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security (ENS) Windows versions prior to 10.7.0 September 2021 Update

Description The issue allows local users to access files they would otherwise not have access to by manipulating junction links to redirect McAfee folder operations to an unintended location. This is due to an improper privileges management vulnerability.

Recommendations For versions prior to 10.7.0 September 2021 Update, update to the September 2021 Update or later to resolve the issue. As a temporary workaround, consider restricting access to the McAfee folder operations to minimize the risk of exploitation.