Skip to content
OpenAdvisories
Medium · 4.8 CVE-2019-3604 EUVD-2019-13239GHSA-pvfc-9226-rpg4

ePolicy Orchestrator Cloud update fixes multiple Cross-Site Request Forgery vulnerabilities

Published Feb 1, 2019 · Updated Aug 4, 2024 · Assigned by trellix

Description

Cross-Site Request Forgery (CSRF) vulnerability in McAfee ePO (legacy) Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors.

Affected products

VendorProductAffectedFixed
McAfee ePolicy Orchestrator Cloud unspecified – < Current Current

References