CVE-2021-23895

Name of the Vulnerable Software and Affected Versions: McAfee Database Security versions prior to 4.8.2

Description: The issue allows a remote authenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server. This is a deserialization of untrusted data vulnerability.

Recommendations: For versions prior to 4.8.2, update to version 4.8.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the DBSec server to minimize the risk of exploitation.