PT-2021-4998 · Mcafee · Mcafee Data Loss Prevention (Dlp) Epo Extension

Published 2021-10-29 · Updated 2023-11-16 · CVE-2021-31848

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention ePO extension versions prior to 11.7.100

Description The issue is related to a lack of protection for the web page structure, allowing for cross-site scripting (XSS) attacks. This can enable a remote attacker to hijack an active administrator session by convincing the logged-in administrator to click on a specially crafted link in the case management part of the ePO extension. The estimated number of potentially affected devices is not provided, and there is no information about real-world incidents where this issue was exploited.

Recommendations For versions prior to 11.7.100, update to version 11.7.100 or later to resolve the issue. As a temporary workaround, consider restricting access to the case management part of the ePO extension to minimize the risk of exploitation. Avoid using specially crafted links in the case management part of the ePO extension until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2021-05763

CVE-2021-31848

Affected Products

Mcafee Data Loss Prevention (Dlp) Epo Extension

References · 6

• https://osv.dev/vulnerability/CVE-2021-31848 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31848 · Security Note
• https://bdu.fstec.ru/vul/2021-05763 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10371 · Vendor Advisory
• https://kc.mcafee.com/corporate/index?page=content&id=SB10371 · Note
• https://t.me/cibsecurity/31577 · Telegram Post