VULNERABILITY INTELLIGENCE
CVE-2021-31839
CVSS score4.8 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2021-06-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Description
Improper privilege management vulnerability in McAfee Agent for Windows prior to 5.7.3 allows a local user to modify event information in the MA event folder. This allows a local user to either add false events or remove events from the event logs prior to them being sent to the ePO server.
Weakness classification
- CWE-269: Improper Privilege Management
Primary references
- trellixpsirt@trellix.com — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link