Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-6672

Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors.

Published

2018-06-15T14:29:00.507

Last Modified

2024-11-21T04:11:05.403

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 5.7 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

8.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-200
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mcafee epolicy_orchestrator ≤ 5.3.3 Yes
Application mcafee epolicy_orchestrator ≤ 5.9.1 Yes
References