PT-2018-17706
CVE-2018-6671
·
Publicado
2018-06-15
·
Atualizado
2019-10-09
Descrição por
CVSS 3.1
6.5
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
McAfee ePolicy Orchestrator (ePO) versions 5.3.0 through 5.3.3
McAfee ePolicy Orchestrator (ePO) versions 5.9.0 through 5.9.1
Description
The issue allows remote authenticated users to bypass localhost only access security protection for some features via a specially crafted HTTP request.
Recommendations
For versions 5.3.0 through 5.3.3, update to a version outside of this range to resolve the issue.
For versions 5.9.0 through 5.9.1, update to a version outside of this range to resolve the issue.
Explorabilidade
Exploit
Correção
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾