Lucene search

[email protected]NVD:CVE-2020-7302

HistoryAug 13, 2020 - 3:15 a.m.

CVE-2020-7302

2020-08-1303:15:14

CWE-434

[email protected]

web.nvd.nist.gov

mcafee

dlp

file upload

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

AI Score

Confidence

High

EPSS

0.001

Percentile

29.4%

JSON

Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.

Affected configurations

Nvd

Node

mcafeedata_loss_preventionRange11.3.0–11.3.28

mcafeedata_loss_preventionRange11.4.0–11.4.200

mcafeedata_loss_preventionRange11.5.0–11.5.3

VendorProductVersionCPE
mcafeedata_loss_prevention*cpe:2.3:a:mcafee:data_loss_prevention:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mcafee	data_loss_prevention	*	cpe:2.3:a:mcafee:data_loss_prevention::::::::

References

kc.mcafee.com/corporate/index?page=content&id=SB10326

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

AI Score

Confidence

High

EPSS

0.001

Percentile

29.4%

JSON

Related for NVD:CVE-2020-7302

cve1 cvelist1 prion1 nessus1