CVE-2013-0140 in ePolicy Orchestrator
Summary
SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
12/06/2012
Disclosure
05/01/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 8551 | McAfee ePolicy Orchestrator Agent DisplayMSAPropsDetail.do sql injection | 89 | Proof-of-Concept | Official fix | CVE-2013-0140 |