Mcafee · Epolicy Orchestrator · CVE-2018-6671
**Name of the Vulnerable Software and Affected Versions**
McAfee ePolicy Orchestrator (ePO) versions 5.3.0 through 5.3.3
McAfee ePolicy Orchestrator (ePO) versions 5.9.0 through 5.9.1
**Description**
The issue allows remote authenticated users to bypass localhost only access security protection for some features via a specially crafted HTTP request.
**Recommendations**
For versions 5.3.0 through 5.3.3, update to a version outside of this range to resolve the issue.
For versions 5.9.0 through 5.9.1, update to a version outside of this range to resolve the issue.