CVE-2021-31839

published 2021-06-10

CVE-2021-31839: Improper privilege management vulnerability in McAfee Agent for Windows prior to 5.7.3 allows a local user to modify event information in the MA event folder…

Priority P4 9 low 3.3 CVSS 3.1

AV L AC L PR L UI N S U C N I L A N

Improper privilege management vulnerability in McAfee Agent for Windows prior to 5.7.3 allows a local user to modify event information in the MA event folder. This allows a local user to either add false events or remove events from the event logs prior to them being sent to the ePO server.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
mcafee	agent	>= 5.0.0 < 5.7.3	5.7.3
mcafee_llc	mcafee_agent_for_windows	>= unspecified < 5.7.3	5.7.3

CVSS provenance

nvd v3.1 3.3 LOW CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269