CVE-2018-6671
4.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Summary
Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HTTP request.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| McAfee | ePolicy Orchestrator (ePO) | 5.3.0 through 5.3.3 < 5.3.3 with hotfix EPO5xHF1229850 | affected |
| McAfee | ePolicy Orchestrator (ePO) | 5.9.0 through 5.9.1 < 5.9.1 with hotfix EPO5xHF1229850 | affected |
Weaknesses
- Application Protection Bypass vulnerability
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/bid/104485
- https://kc.mcafee.com/corporate/index?page=content&id=SB10240
- https://www.exploit-db.com/exploits/46518/
- http://www.securitytracker.com/id/1041155
References
- http://www.securityfocus.com/bid/104485
- https://kc.mcafee.com/corporate/index?page=content&id=SB10240
- https://www.exploit-db.com/exploits/46518/
- http://www.securitytracker.com/id/1041155
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.