PT-2021-15592 · Mcafee · Mcafee Agent+2

Published 2021-03-26 · Updated 2022-05-27 · CVE-2021-23890

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: McAfee ePolicy Orchestrator (ePO) versions prior to 5.10 Update 10

Description: The issue allows an unauthenticated user to download McAfee product packages, specifically McAfee Agent, available in the ePO repository and install them on their own machines to have it managed. This can then allow the user to get policy details from the ePO server. The vulnerability is exploitable when the ePO Agent Handler is installed in a Demilitarized Zone (DMZ) to service machines not connected to the network through a VPN.

Recommendations: For versions prior to 5.10 Update 10, update to version 5.10 Update 10 or later to resolve the issue. As a temporary workaround, consider restricting access to the ePO Agent Handler when it is installed in a DMZ, or ensure that machines serviced by the Agent Handler in the DMZ are properly secured and monitored.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2021-23890

Affected Products

Mcafee Agent

Mcafee Epolicy Orchestrator

Epo Agent Handler

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-23890 · Security Note
• https://osv.dev/vulnerability/CVE-2021-23890 · Vendor Advisory
• https://t.me/cvenotify/12020 · Telegram Post
• https://t.me/cvenotify/12042 · Telegram Post
• https://kc.mcafee.com/corporate/index?page=content&id=SB10352 · Note