TrellixCVELIST:CVE-2022-0842CVE-2022-0842 ePO blind SQL Injection vulnerability
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.6%
A blind SQL injection vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote authenticated attacker to potentially obtain information from the ePO database. The data obtained is dependent on the privileges the attacker has and to obtain sensitive data the attacker would require administrator privileges.
CNA Affected
[
{
"product": "McAfee ePolicy Orchestrator (ePO)",
"vendor": "McAfee,LLC",
"versions": [
{
"lessThan": "5.10 CU 13",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.6%