Описание
Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.
Уязвимые конфигурации
Конфигурация 1Версия до 4.8.2 (исключая)
cpe:2.3:a:mcafee:database_security:*:*:*:*:*:*:*:*
EPSS
Процентиль: 80%
0.01406
Низкий
9 Critical
CVSS3
8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-502
CWE-502
Связанные уязвимости
CVSS3: 8
github
больше 3 лет назад
Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.
EPSS
Процентиль: 80%
0.01406
Низкий
9 Critical
CVSS3
8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-502
CWE-502