Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2019-3604

ePolicy Orchestrator Cloud update fixes multiple Cross-Site Request Forgery vulnerabilities

Description

Cross-Site Request Forgery (CSRF) vulnerability in McAfee ePO (legacy) Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee, LLC ePolicy Orchestrator Cloud

  • unspecified to < Currentaffected

References