Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-31850

A denial-of-service vulnerability in Database Security (DBS) prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files in Windows system directories and other locations where sensitive data could be overwritten. The former could lead to a DoS, whilst the latter could lead to data destruction on the DBS server.

Published

2021-12-08T11:15:11.737

Last Modified

2024-11-21T06:06:21.193

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:N/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

6.8

Impact Score

4.9

Weaknesses
  • Type: Secondary
    CWE-552
  • Type: Primary
    CWE-552
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mcafee database_security < 4.8.4 Yes
Operating System microsoft windows - No
References