CVE-2016-8027 in McAfee ePolicy Orchestrator

Resumen (Inglés)

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a specially crafted HTTP post.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2016-09-09

Divulgación

2017-03-14

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
97939	Intel McAfee ePolicy Orchestrator inyección SQL	89	No está definido	Arreglo oficial	CVE-2016-8027

Fuentes

• MITRE
• NVD
• CVE Details