CVE-2016-8027 SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disc...
CriticalCVSS 10.0
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a specially crafted HTTP post.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee epolicy orchestrator | >= 5.1.0, <= 5.1.3 | No fix listed |
| mcafee epolicy orchestrator | >= 5.3.0, <= 5.3.2 | No fix listed |
References
- 95981 third-party-advisory vdb-entry
- 1037777 third-party-advisory vdb-entry
- kc.mcafee.com vendor-advisory