PT-2018-17706

CVE-2018-6671

·

Published

2018-06-15

·

Updated

2019-10-09

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator (ePO) versions 5.3.0 through 5.3.3 McAfee ePolicy Orchestrator (ePO) versions 5.9.0 through 5.9.1
Description The issue allows remote authenticated users to bypass localhost only access security protection for some features via a specially crafted HTTP request.
Recommendations For versions 5.3.0 through 5.3.3, update to a version outside of this range to resolve the issue. For versions 5.9.0 through 5.9.1, update to a version outside of this range to resolve the issue.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2018-6671
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com