Authenticated admin anti-malware removal via unchecked attribute

Improper access control in McAfee ENS for Windows before the February 2021 update lets authenticated local administrators uninstall the anti-malware engine. The installer attribute handling accepts a specially parameterized command that permits the anti-malware component to be removed without an additional authorization check. The gate is local administrator authentication; successful use disables malware scanning and can leave the endpoint without that protection.