PT-2021-15598
CVE-2021-23896
·
Published
2021-06-02
·
Updated
2021-06-11
Description by
CVSS 3.1
4.5
MediumMetricsAV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
McAfee Database Security (DBSec) versions prior to 4.8.2
Description:
The administrator interface of McAfee Database Security (DBSec) contains a Cleartext Transmission of Sensitive Information issue, allowing an administrator to view the unencrypted password of the McAfee Insights Server. This access is restricted to DBSec data within the Insights Server.
Recommendations:
For versions prior to 4.8.2, update to version 4.8.2 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾