What is CVE-2021-23882?

CVE-2021-23882 is a high-severity vulnerability in Mcafee Endpoint_security, classified under Improper Privilege Management. CVSS score: 8.2/10. Published 2021-02-10.

How severe is CVE-2021-23882?

High severity. CVSS v3 base score is 8.2 out of 10.

Privilege escalation in Mcafee Endpoint_security

CVE-2021-23882

Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS…

Vulnerability class: Privilege Escalation

EPSS: 0.003 (20.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.

Affected products

Mcafee Endpoint_security
Mcafee Llc Endpoint Security (Ens) For Windows — versions 10.7.x

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

trellixpsirt@trellix.com (x_refsource_CONFIRM, Broken Link, Vendor Advisory)

Frequently asked questions

What is CVE-2021-23882?: CVE-2021-23882 is a high-severity vulnerability in Mcafee Endpoint_security, classified under Improper Privilege Management. CVSS score: 8.2/10. Published 2021-02-10.
How severe is CVE-2021-23882?: High severity. CVSS v3 base score is 8.2 out of 10.