CVE-2021-23879

The CVE-2021-23879 entry describes an unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool, before version 21.2. The flaw allows local administrators to execute arbitrary code with elevated privileges by placing files in an insecure path where the tool runs, due to th...

PT-2021-15581

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Product Removal EPR Tool versions prior to 21.2 Description: The issue allows local administrators to execute arbitrary code with higher-level privileges via execution from a compromised folder. The tool did not enforce and...