Description
Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS requests to arbitrary domains via carefully constructed XML files loaded by an ePO administrator.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| McAfee | MVISION Endpoint ePO extension | 20.x – ≤ 20.11 | — |