Unrestricted file upload

2020-08-1303:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.6%

JSON

Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.

CPENameOperatorVersion
data_loss_preventionge11.3.0
data_loss_preventionlt11.3.28
data_loss_preventionge11.4.0
data_loss_preventionlt11.4.200
data_loss_preventionge11.5.0
data_loss_preventionlt11.5.3

Name	Operator	Version
data_loss_prevention	ge	11.3.0
data_loss_prevention	lt	11.3.28
data_loss_prevention	ge	11.4.0
data_loss_prevention	lt	11.4.200
data_loss_prevention	ge	11.5.0
data_loss_prevention	lt	11.5.3

References

kc.mcafee.com/corporate/index?page=content&id=SB10326