CVE-2013-0141

Опубликовано: 01 мая 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory.

Ссылки

http://seclists.org/fulldisclosure/2014/Apr/289
http://www.kb.cert.org/vuls/id/209131
US Government Resource
http://www.us-cert.gov/ncas/alerts/TA13-193A
https://kc.mcafee.com/corporate/index?page=content&id=SB10042
Vendor Advisory
http://seclists.org/fulldisclosure/2014/Apr/289
http://www.kb.cert.org/vuls/id/209131
US Government Resource
http://www.us-cert.gov/ncas/alerts/TA13-193A
https://kc.mcafee.com/corporate/index?page=content&id=SB10042
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*

Версия до 4.5.6 (включая)

cpe:2.3:a:mcafee:epolicy_orchestrator:2.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:2.5:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:2.5:sp1:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:sp2a:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:3.5.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.1:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:4.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.3:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.4:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.5:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.1:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.2:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.3:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.4:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.5:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00421

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-xw72-87hw-9gf3

github

больше 3 лет назад