CVE-2021-31850: 
McAfee Database Security vulnerability analysis and mitigation

A denial-of-service vulnerability (CVE-2021-31850) was identified in McAfee Database Security (DBS) versions prior to 4.8.4. The vulnerability allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server through improper configuration of the Archiving feature (NVD, ZDI Advisory).

The vulnerability stems from the configuration of Archiving through the User interface that incorrectly allowed the creation of directories and files in Windows system directories and other sensitive locations. The vulnerability has been assigned a CVSS v3.1 base score of 6.1 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H (NVD).

The vulnerability has two primary impacts: it could lead to a denial-of-service condition on the DBS server, and it could result in data destruction where sensitive data could be overwritten in various locations on the server (NVD).

McAfee has released version 4.8.4 of Database Security to address this vulnerability. Users are advised to upgrade to this version or later to mitigate the risk (ZDI Advisory).