CVE-2020-7308 Transmission of data in clear text by McAfee ENS

Cleartext Transmission of Sensitive Information between McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update and McAfee Global Threat Intelligence GTI servers using DNS allows a remote attacker to view the requests from ENS and responses from GTI over DNS. By gaining...

CVE-2021-23884

CVE-2021-23884 affects the ePO Extension of McAfee Content Security Reporter (CSR). The issue stems from cleartext transmission that lets an ePO administrator view unencrypted credentials (MWG or MWGCS read-only user used for log retrieval). Affected: CSR versions prior to 2.8.0. Mitigation: upgr...

CVE-2021-23884 Clear text exposure of password in McAfee CSR ePO extension

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter CSR prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway MWG or the password of the McAfee Web Gateway Cloud Server MWGCS read on...

PT-2021-15589 · Mcafee · Mcafee Data Loss Prevention Endpoint

Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention DLP Endpoint for Windows versions prior to 11.6.100 Description: A local, low-privileged attacker can exploit this issue to write to arbitrary controlled kernel addresses. This is achieved by launching applications...

Mcafee Data Loss Prevention Endpoint 安全漏洞

Mcafee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from Mcafee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transfer, shared endpoint data flow control, and data encryptio...

Mcafee Data Loss Prevention Endpoint 安全漏洞

Mcafee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from Mcafee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transfer, shared endpoint data flow control, and data encryptio...

PT-2021-12643 · Mcafee · Mcafee Advanced Threat Defense

Name of the Vulnerable Software and Affected Versions: McAfee Advanced Threat Defense ATD versions prior to 4.12.2 Description: The issue allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter in the web interface. The risk is...

Mcafee McAfee Endpoint Security 安全漏洞

Mcafee McAfee Endpoint Security ENS is a set of U.S. McAfee Mcafee company to provide intelligent collaboration and advanced threat defense framework. The framework supports control of the entire threat defense lifecycle for real-time communications and actionable threat forensics, among other...

迈克菲 McAfee Content Security Reporter 安全漏洞

McAfee Content Security Reporter is an application from McAfee, Inc. A reporting software solution that helps you identify and analyze a variety of data collected from network devices. A security vulnerability exists in McAfee Content Security Reporter CSR prior to version 2.8.0, which stems from...

PT-2021-15588 · Mcafee · Mcafee Data Loss Prevention Endpoint

Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention DLP Endpoint for Windows versions prior to 11.6.100 Description: A Denial of Service issue allows a local, low privileged, attacker to cause a BSoD through suspending a process, modifying the process's memory and...

PT-2021-12645 · Mcafee · Mcafee Endpoint Security (Ens) For Windows +1

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 February 2021 Update Description: The issue allows a remote attacker to view requests from ENS and responses from McAfee Global Threat Intelligence GTI servers over DNS. This i...

PT-2021-15586 · Mcafee · Mcafee Web Gateway +2

Name of the Vulnerable Software and Affected Versions: McAfee Content Security Reporter CSR versions prior to 2.8.0 Description: The issue allows an ePO administrator to view unencrypted passwords of the McAfee Web Gateway MWG or the McAfee Web Gateway Cloud Server MWGCS read-only user. This occu...

PT-2021-12644 · Mcafee · Mcafee Advanced Threat Defense

Name of the Vulnerable Software and Affected Versions: McAfee Advanced Threat Defense ATD versions prior to 4.12.2 Description: The issue allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter in the web interface. The risk is...

The vulnerability of the McAfee Data Loss Prevention Endpoint software for Windows, related to insecure management of privileges, allows a perpetrator to execute DLL libraries.

The vulnerability of the McAfee Data Loss Prevention Endpoint software for Windows relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to load DLL libraries using specially crafted IOCTL calls...

McAfee ePolicy Orchestrator Multiple Vulnerabilities (SB10352)

The instance of McAfee ePolicy Orchestrator installed on the remote host is potentially affected by the following vulnerabilities: - An unvalidated client-side URL redirect vulnerability exists in McAfee ePolicy Orchestrator ePO. An unauthenticated, remote attacker could exploit this to cause an...

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software allows a hacker to upload malicious files.

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software lies in the ability to upload malicious files without limitation. Exploiting this vulnerability could allow a remote attacker to upload malware files...

McAfee ePolicy Orchestrator URL Redirection Vulnerability

McAfee ePolicy Orchestrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. A security vulnerability exists in versions of McAfee ePolicy Orchestrator ePO...

McAfee ePolicy Orchestrator Cross-Site Scripting Vulnerability

McAfee ePolicy Orchistrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. A cross-site scripting vulnerability exists in McAfee ePolicy Orchestrator ePO...

McAfee ePolicy Orchestrator Information Disclosure Vulnerability (CNVD-2021-24351)

McAfee ePolicy Orchistrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. An information disclosure vulnerability exists in McAfee ePolicy Orchestrator...

CVE-2021-23890

Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator ePO prior to 5.10 Update 10 allows an unauthenticated user to download McAfee product packages specifically McAfee Agent available in ePO repository and install them on their own machines to have it managed and the...