CVE-2021-31843: 
Trellix Endpoint Security Agent vulnerability analysis and mitigation

CVE-2021-31843 is an improper privileges management vulnerability affecting McAfee Endpoint Security (ENS) Windows versions prior to 10.7.0 September 2021 Update. The vulnerability was discovered and disclosed in 2021, with the initial CVE record being created on April 27, 2021 (CVE MITRE).

The vulnerability is classified as an improper link resolution before file access (link following) issue, identified as CWE-59. It has received a CVSS v3.1 base score of 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability allows local users to manipulate junction links to redirect McAfee folder operations to unintended locations (NVD).

The vulnerability enables local users to access files which they would otherwise not have access to through the manipulation of junction links. This results in high impacts on confidentiality, integrity, and availability of the system (NVD).

The vulnerability requires local access with low attack complexity and low privileges. No user interaction is needed for exploitation according to the CVSS metrics (NVD).

The vulnerability has been addressed in McAfee Endpoint Security (ENS) Windows version 10.7.0 September 2021 Update. Users are advised to upgrade to this version or later to mitigate the vulnerability (CVE MITRE).