CVE-2021-23894 in Database Security

Sumário

de MITRE • 02/06/2021

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsável: McAfee
• Reservar: 12/01/2021
• Divulgação: 02/06/2021
• Moderação: aceite
• Entrada: VDB-176228
• CPE: pronto
• CWE: CWE-502 (confirmado)
• CVSS: 6.3 (VulDB)
• EPSS: 0.02242
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-23894
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-23894
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-23894/