PT-2018-17706 · Mcafee · Epolicy Orchestrator

Leonjza · Publicado 2018-06-15 · Atualizado 2019-10-09 · CVE-2018-6671

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator (ePO) versions 5.3.0 through 5.3.3 McAfee ePolicy Orchestrator (ePO) versions 5.9.0 through 5.9.1

Description The issue allows remote authenticated users to bypass localhost only access security protection for some features via a specially crafted HTTP request.

Recommendations For versions 5.3.0 through 5.3.3, update to a version outside of this range to resolve the issue. For versions 5.9.0 through 5.9.1, update to a version outside of this range to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2018-6671

Produtos afetados

Epolicy Orchestrator

Referências · 6

• 🔥 https://exploit-db.com/exploits/46518 · Exploit
• http://securityfocus.com/bid/104485 · Nota
• https://osv.dev/vulnerability/CVE-2018-6671 · Aviso do Fabricante
• https://kc.mcafee.com/corporate/index?page=content&id=SB10240 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-6671 · Nota de Segurança
• http://securitytracker.com/id/1041155 · Nota