The instance of McAfee ePolicy Orchestrator installed on the remote host is affected by multiple vulnerabilities, including the following:

  - McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a local attacker to point an     ePO server to an arbitrary SQL server during the restoration of the ePO server. To achieve this the     attacker would have to be logged onto the server hosting the ePO server (restricted to administrators) and     to know the SQL server password. (CVE-2022-0859)

  - A blind SQL injection vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update     13 allows a remote authenticated attacker to potentially obtain information from the ePO database. The     data obtained is dependent on the privileges the attacker has and to obtain sensitive data the attacker     would require administrator privileges. (CVE-2022-0842)

  - A reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior     to 5.10 Update 13 allows a remote attacker to potentially obtain access to an ePO administrator's session     by convincing the attacker to click on a carefully crafted link. This would lead to limited access to     sensitive information and limited ability to alter some information in ePO due to the area of the User     Interface the vulnerability is present in. (CVE-2022-0857)


Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version

Detections

Analytics

McAfee ePolicy Orchestrator Multiple Vulnerabilities (SB10379)

medium Nessus Plugin ID 159332

Version 1.5