CVE-2013-0140 in ePolicy Orchestrator
Zusammenfassung (Englisch)
SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservieren
06.12.2012
Veröffentlichung
01.05.2013
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 8551 | McAfee ePolicy Orchestrator Agent DisplayMSAPropsDetail.do SQL Injection | 89 | Proof-of-Concept | Offizieller Fix | CVE-2013-0140 |