critical10.0
CVE-2016-8027
SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to al…
Impact
SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a specially crafted HTTP post.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mcafee | Epolicy Orchestrator | from 5.1.0 through 5.1.3 from 5.3.0 through 5.3.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/95981
- http://www.securitytracker.com/id/1037777
- https://kc.mcafee.com/corporate/index?page=content&id=SB10187
- http://www.securityfocus.com/bid/95981
- http://www.securitytracker.com/id/1037777
- https://kc.mcafee.com/corporate/index?page=content&id=SB10187