Skip to content
OpenAdvisories
Unscored CVE-2016-8027 EUVD-2016-8875GHSA-6mc2-5j9g-7346

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier al…

Published Mar 14, 2017 · Updated Aug 6, 2024 · Assigned by intel

Description

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a specially crafted HTTP post.

Affected products

VendorProductAffectedFixed
— McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier —

References