PT-2015-7519
CVE-2015-7310
·
تاريخ النشر
2015-09-22
·
تاريخ التحديث
2016-12-08
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
McAfee Enterprise Security Manager (ESM) versions prior to 9.3.2MR18
McAfee Enterprise Security Manager/Log Manager (ESMLM) versions prior to 9.4.2MR8
McAfee Enterprise Security Manager/Receiver (ESMREC) versions prior to 9.5.0MR7
Description
The issue allows remote authenticated users to execute arbitrary OS commands via a crafted filename, which is not properly handled when downloading the file.
Recommendations
For versions prior to 9.3.2MR18, update to version 9.3.2MR18 or later.
For versions prior to 9.4.2MR8, update to version 9.4.2MR8 or later.
For versions prior to 9.5.0MR7, update to version 9.5.0MR7 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾