Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2021-23888

McAfee ePO unvalidated URL redirect vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user to load an untrusted site in an ePO iframe which could steal information from the authenticated user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee,LLC McAfee ePolicy Orchestrator (ePO)

  • unspecified to < 5.10 CU 10affected

References