PT-2021-4912 · Mcafee · Mcafee Data Loss Prevention (Dlp) Epo Extension

Published 2021-10-29 · Updated 2023-11-15 · CVE-2021-31849

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention ePO extension versions prior to 11.7.100

Description The issue is related to a lack of protection against special elements used in SQL queries, allowing a remote attacker to execute arbitrary SQL code. This can be done through the user management section of the DLP ePO extension. The attacker must be logged in as an administrator to exploit this issue.

Recommendations For versions prior to 11.7.100, update to version 11.7.100 or later to resolve the issue. As a temporary workaround, consider restricting access to the user management section of the DLP ePO extension to minimize the risk of exploitation.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2021-05647

BDU:2021-05876

CVE-2021-31849

Affected Products

Mcafee Data Loss Prevention (Dlp) Epo Extension

References · 9

• https://osv.dev/vulnerability/CVE-2021-31849 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31849 · Security Note
• https://bdu.fstec.ru/vul/2021-05647 · Security Note
• https://bdu.fstec.ru/vul/2021-05876 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-41269 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10371 · Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10371 · Note
• https://t.me/cibsecurity/31574 · Telegram Post
• https://access.redhat.com/security/cve/cve-2021-41269 · Note