CVE-2021-23879

The CVE-2021-23879 entry describes an unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool, before version 21.2. The flaw allows local administrators to execute arbitrary code with elevated privileges by placing files in an insecure path where the tool runs, due to th...

PT-2021-15581

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Product Removal EPR Tool versions prior to 21.2 Description: The issue allows local administrators to execute arbitrary code with higher-level privileges via execution from a compromised folder. The tool did not enforce and...

CVE-2021-23879: Unquoted Search Path or Element

Unquoted service path vulnerability in McAfee Endpoint Product Removal EPR Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileg...