ID de Prueba:	1.3.6.1.4.1.25623.1.0.803864
Categoría:	Web application abuses
Título:	McAfee ePolicy Orchestrator (ePO) Multiple Vulnerabilities-01 (Aug 2013)
Resumen:	McAfee ePolicy Orchestrator is prone to multiple vulnerabilities.
Descripción:	Summary: McAfee ePolicy Orchestrator is prone to multiple vulnerabilities. Vulnerability Insight: Flaws are due to improper sanitation of user supplied input via 'uid' parameter to /EPOAGENTMETA/DisplayMSAPropsDetail.do script and specifically directory traversal style (e.g., ../../). Vulnerability Impact: Successful exploitation will allow remote attackers to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data. Affected Software/OS: McAfee ePolicy Orchestrator (ePO) version before 4.5.7 and 4.6.x before 4.6.6 Solution: Upgrade to McAfee ePolicy Orchestrator version 5.0 or 4.6.6 or 4.5.7 or later. CVSS Score: 7.9 CVSS Vector: AV:A/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0140 BugTraq ID: 59500 http://www.securityfocus.com/bid/59500 Cert/CC Advisory: TA13-193A http://www.us-cert.gov/ncas/alerts/TA13-193A CERT/CC vulnerability note: VU#209131 http://www.kb.cert.org/vuls/id/209131 http://seclists.org/fulldisclosure/2014/Apr/289 Common Vulnerability Exposure (CVE) ID: CVE-2013-0141
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.