exploitDog

CVE-2015-8987

Опубликовано: 14 мар. 2017

Источник: nvd

CVSS3: 5.3

CVSS2: 3.5

EPSS Низкий

Описание

Man-in-the-middle (MitM) attack vulnerability in non-Mac OS agents in McAfee (now Intel Security) Agent (MA) 4.8.0 patch 2 and earlier allows attackers to make a McAfee Agent talk with another, possibly rogue, ePO server via McAfee Agent migration to another ePO server.

Ссылки

https://kc.mcafee.com/corporate/index?page=content&id=SB10101
Mitigation
Patch
Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10101
Mitigation
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mcafee:agent:*:*:*:*:*:*:*:*

Версия до 4.8.0 (включая)

EPSS

Процентиль: 35%

0.00145

Низкий

5.3 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-284

Связанные уязвимости

GHSA-84v3-8746-q3rg

CVSS3: 5.3

github

больше 3 лет назад

Man-in-the-middle (MitM) attack vulnerability in non-Mac OS agents in McAfee (now Intel Security) Agent (MA) 4.8.0 patch 2 and earlier allows attackers to make a McAfee Agent talk with another, possibly rogue, ePO server via McAfee Agent migration to another ePO server.

EPSS

Процентиль: 35%

0.00145

Низкий

5.3 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-284