Описание
Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.
Уязвимые конфигурации
Конфигурация 1Версия до 4.8.2 (исключая)
cpe:2.3:a:mcafee:database_security:*:*:*:*:*:*:*:*
EPSS
Процентиль: 89%
0.04277
Низкий
9.6 Critical
CVSS3
8.8 High
CVSS3
10 Critical
CVSS2
Дефекты
CWE-502
CWE-502
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.
EPSS
Процентиль: 89%
0.04277
Низкий
9.6 Critical
CVSS3
8.8 High
CVSS3
10 Critical
CVSS2
Дефекты
CWE-502
CWE-502