Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2018-6671

SB10240 - ePolicy Orchestrator (ePO) - Application Protection Bypass vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HTTP request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee ePolicy Orchestrator (ePO)

  • 5.3.0 through 5.3.3 to < 5.3.3 with hotfix EPO5xHF1229850affected
  • 5.9.0 through 5.9.1 to < 5.9.1 with hotfix EPO5xHF1229850affected

References