Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jcwg-4q3h-fc3w

Опубликовано: 15 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server.

A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server.

EPSS

Процентиль: 42%
0.00201
Низкий

7.2 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 8.4
nvd
почти 4 года назад

A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server.

CVSS3: 8.4
fstec
почти 4 года назад

Уязвимость расширения ePolicy Orchestrator антивирусного программного средства McAfee Agent, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 42%
0.00201
Низкий

7.2 High

CVSS3

Дефекты

CWE-89