OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:26
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 6.2 |
References | () http://www.securityfocus.com/bid/103155 - | |
References | () https://kc.mcafee.com/corporate/index?page=content&id=SB10227 - |
07 Nov 2023, 02:44
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.securityfocus.com/bid/103155 - | |
References | () https://kc.mcafee.com/corporate/index?page=content&id=SB10227 - |
Information
Published : 2018-06-13 21:29
Updated : 2024-11-21 03:26
NVD link : CVE-2017-3936
Mitre link : CVE-2017-3936
CVE.ORG link : CVE-2017-3936
JSON object : View
Products Affected
mcafee
- epolicy_orchestrator
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')