Skip to content
OpenAdvisories
Unscored CVE-2013-0141 EUVD-2013-0184GHSA-xw72-87hw-9gf3

Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to uploa…

Published May 1, 2013 · Updated Aug 6, 2024 · Assigned by certcc

Description

Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory.

References