Detections
Analytics

McAfee ePO DLPe Extension < 9.3.400 Multiple Vulnerabilities (SB10098)

medium Nessus Plugin ID 81422

Language:

Synopsis

The remote host is affected by multiple vulnerabilities.

Description

The remote McAfee ePO server has a vulnerable version of McAfee Data Loss Protection Endpoint (DLPe) extension installed that is affected by multiple vulnerabilities :

 - An unspecified SQL injection vulnerability exists due to improper sanitization of user-supplied input. This allows an authenticated, remote attacker to inject or manipulate SQL queries, resulting in the disclosure of sensitive information. (CVE-2015-1616)

 - An unspecified cross-site scripting vulnerability exists due to improper validation of user-supplied input. This allows an authenticated, remote attacker to execute arbitrary script code in a user's browser session.
 (CVE-2015-1617)

 - An information disclosure vulnerability exists due to access checks not being properly enforced. A remote, authenticated attacker can gain access to password information via a specially crafted URL.
 (CVE-2015-1618)

Solution

Install or update to DLPe 9.3 Patch 4 (9.3.400).

See Also

https://kc.mcafee.com/corporate/index?page=content&id=SB10098

Plugin Details

Severity: Medium

ID: 81422

File Name: mcafee_epo_sb10098.nasl

Version: 1.8

Type: local

Agent: windows

Family: Windows

Published: 2/20/2015

Updated: 7/14/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 4.8

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:mcafee:data_loss_prevention_endpoint

Required KB Items: SMB/mcafee_epo/Path, SMB/mcafee_epo/ver

Exploit Ease: No known exploits are available

Patch Publication Date: 1/20/2015

Vulnerability Publication Date: 1/20/2015

Reference Information

CVE: CVE-2015-1616, CVE-2015-1617, CVE-2015-1618

BID: 73419, 73421, 73422

MCAFEE-SB: SB10098