McAfee Cloud SSO / Asset Manager Issues

Cloud SSO is vuln to unauthed XSS in the authentication audit form: 2. 1. https://twitter.com/BrandonPrry/status/445969380656943104 2. 1. 2. McAfee Asset Manager v6.6 multiple vulnerabilities 3. 4. http://www.mcafee.com/us/products/asset-manager.aspx 5. 6. Authenticated arbitrary file read 7. An...

McAfee Email Gateway/McAfee Email和Web Security Appliance多个SQL注入漏洞

CVE ID:CVE-2013-7092 McAfee Email Gateway是一款电子邮件解决方案。McAfee Email and Web Security Appliance用于智能化的垃圾邮件和恶意软件防护。 通过"eventscol", "eventid", "reason", "eventsorder", "emailstatusorder"和"emailstatuscol" JSON键值提交给/admin/cgi-bin/rpc/doReport/18的输入在用于SQL查询之前缺少过滤，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 McAfee...

McAfee Cloud Single Sign On目录遍历漏洞

CVE ID: CVE-2014-2536 McAfee Cloud Single Sign On是一款基于云的单点登录解决方案。 McAfee Cloud Single Sign On不正确过滤用户提交的输入，允许远程攻击者利用漏洞提交特制的目录遍历请求，读取任意文件内容。 0 McAfee Cloud Single Sign On formerly McAfee Cloud Identity Manager 4.x McAfee Cloud Single Sign On 4.0.1已经修复该漏洞，建议用户下载更新：...

McAfee Email Gateway/McAfee Email and Web Security Appliance SQL注入漏洞

CVE ID：CVE-2013-7092 McAfee Email Gateway之前名为IronMail，是企业级的硬件邮件网关和管理平台。 由于通过"eventscol", "eventid", "reason", "eventsorder", "emailstatusorder"和"emailstatuscol" JSON keys传递到/admin/cgi-bin/rpc/doReport/18的输入在被用于SQL查询前没有正确过滤，攻击者可以利用漏洞通过注入任意SQL代码操纵SQL查询。 0 McAfee Email and Web Security Appliance 5.x...

McAfee Web Gateway任意文件泄漏漏洞

McAfee Email Gateway是一款全面的电子邮件安全解决方案。 该漏洞是由于处理请求时MWG网页过滤端口的错误，可被利用通过目录遍历序列来下载任意文件。 0 McAfee Web Gateway 7.x McAfee Web Gateway 7.4.1或7.3.2.6版本以修复此漏洞，建议用户下载使用： https://kc.mcafee.com/corporate/index?page=content&id=SB10063...

McAfee ePolicy Orchestrator information leakage

Information leakage via XML include...

[RT-SA-2014-001] McAfee ePolicy Orchestrator: XML External Entity Expansion in Dashboard

Advisory: McAfee ePolicy Orchestrator XML External Entity Expansion in Dashboard RedTeam Pentesting identified an XML external entity expansion vulnerability in McAfee ePolicy Orchestrator's ePO dashboard feature. Users with the ability to create new dashboards in the ePO web interface who exploi...

McAfee ePolicy Orchestrator XML外部实体漏洞

Bugtraq ID:65771 McAfee ePolicy Orchestrator是一款业界领先的系统安全管理解决方案，能够帮助企业有效抵御各种恶意威胁和攻击。 McAfee ePolicy Orchestrator在解析XML实体时存在错误，允许攻击者通过特制的包含外部实体引用的XML文档，获取本地文件内容信息。 要成功利用漏洞需要有编辑dashboards, queries, reports或server任务的权限。 0 McAfee ePolicy Orchestrator 4.6.7 厂商补丁： McAfee ----- 用户可参考如下厂商提供的安全补丁以修复该漏洞：...

McAfee ePolicy Orchestrator Unsupported Version Detection

According to its version, the installation of McAfee ePolicy Orchestrator ePO on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable...

McAfee ePolicy Orchestrator < 4.6.7 HF940148 XML Entity Injection (SB10065)

The remote Windows host is running a version of McAfee ePolicy Orchestrator ePO prior to 4.6.7 hotfix 940148. It is, therefore, affected by an XML entity injection vulnerability due to a failure to properly sanitize user-supplied input. An authenticated, remote attacker with permission to add new...

CVE-2014-2205

The Import and Export Framework in McAfee ePolicy Orchestrator ePO before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity XXE issue...

Xxe

The Import and Export Framework in McAfee ePolicy Orchestrator ePO before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity XXE issue...

CVE-2014-2205

The Import and Export Framework in McAfee ePolicy Orchestrator ePO before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity XXE issue...

CVE-2014-2205

CVE-2014-2205 affects McAfee ePolicy Orchestrator (ePO) up to version 4.6.7 with Hotfix 940148. The issue is an XML External Entity (XXE) weakness in the ePO Web Console that, when a remote, authenticated user with permission to add dashboards imports a crafted XML dashboard definition, allows re...

KLA10261 RLF vulnerability in McAfee ePolicy Orchestrator

An unspecified vulnerability was found in McAfee ePolicy Orchestrator. By exploiting this vulnerability malicious users can read arbitrary files. This vulnerability can be exploited remotely via a specially designed XML file. Original advisories - Related products McAfee-ePolicy-Orchestrator CVE...

McAfee ePolicy Orchestrator XML External Entity Expansion

Advisory: McAfee ePolicy Orchestrator XML External Entity Expansion in Dashboard RedTeam Pentesting identified an XML external entity expansion vulnerability in McAfee ePolicy Orchestrator's ePO dashboard feature. Users with the ability to create new dashboards in the ePO web interface who exploi...

McAfee Web Gateway User Interface Detection

Binary data mcafeewebgatewaykonfiguratordetect.nbin...

McAfee Web Gateway User Interface Default Credentials

The remote McAfee Web Gateway user interface uses a known set of default credentials. Knowing these, an attacker with access to service can gain administrative access to the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

McAfee Vulnerability Manager Installed (credentialed check)

Binary data mcafeevulnerabilitymanagerinstalled.nbin...

McAfee Vulnerability Manager Enterprise Manager Multiple Vulnerabilities (SB10061)

The version of McAfee Vulnerability Manager installed is 7.0.x prior to 7.0.11.05002, 7.5.x earlier than 7.5.4, 7.5.4 prior to 7.5.4.05007, or 7.5.5 prior to 7.5.5.05002. It is, therefore, potentially affected by multiple cross-site scripting and cross-site request forgery vulnerabilities in the...