exploitDog

CVE-2015-0922

Опубликовано: 09 янв. 2015

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers' installations, which allows attackers to obtain the administrator password by leveraging knowledge of the encrypted password.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*

Версия до 4.6.8 (включая)

cpe:2.3:a:mcafee:epolicy_orchestrator:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.45748

Средний

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-qxrr-82rg-jq7p

github

больше 3 лет назад

McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers' installations, which allows attackers to obtain the administrator password by leveraging knowledge of the encrypted password.

EPSS

Процентиль: 98%

0.45748

Средний

5 Medium

CVSS2

Дефекты

CWE-200