Lucene search

TrellixCVE-2021-31831

HistoryJun 03, 2021 - 10:15 a.m.

CVE-2021-31831

2021-06-0310:15:07

CWE-552

trellix

web.nvd.nist.gov

cve-2021-31831

mcafee

dbsec

vulnerability

remote access

rest api

sql

deleted scripts

nvd

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

5.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

26.5%

JSON

Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain access to signed SQL scripts which have been marked as deleted or expired within the administrative console. This access was only available through the REST API.

Affected configurations

Nvd

Node

mcafeedatabase_securityRange<4.8.2

VendorProductVersionCPE
mcafeedatabase_security*cpe:2.3:a:mcafee:database_security:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mcafee	database_security	*	cpe:2.3:a:mcafee:database_security::::::::

CNA Affected

[
  {
    "product": "McAfee Database Security (DBSec)",
    "vendor": "McAfee,LLC",
    "versions": [
      {
        "lessThan": "4.8.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10359

Social References

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

5.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

26.5%

JSON

Related for CVE-2021-31831