CVE-2022-3338

An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trigger a Server Side Request Forgery attack. This can be exploited by mimicking the Agent Handler call to ePO and passing the carefully constructed XML file through the API.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://kcm.trellix.com/corporate/index?page=content&id=SB10387	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mcafee:epolicy_orchestrator::::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_10::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_11::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_12::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_13::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_7::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_8::::::
	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_9::::::

History

No history.

Information

Published : 2022-10-18 10:15

Updated : 2024-02-28 19:29

NVD link : CVE-2022-3338

Mitre link : CVE-2022-3338

CVE.ORG link : CVE-2022-3338

JSON object : View

Products Affected

mcafee

epolicy_orchestrator

CWE

CWE-611

Improper Restriction of XML External Entity Reference

{"id": "CVE-2022-3338", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.2}, {"type": "Secondary", "source": "trellixpsirt@trellix.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.2}]}, "published": "2022-10-18T10:15:10.637", "references": [{"url": "https://kcm.trellix.com/corporate/index?page=content&id=SB10387", "tags": ["Third Party Advisory"], "source": "trellixpsirt@trellix.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-611"}]}, {"type": "Secondary", "source": "trellixpsirt@trellix.com", "description": [{"lang": "en", "value": "CWE-611"}]}], "descriptions": [{"lang": "en", "value": "An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trigger a Server Side Request Forgery attack. This can be exploited by mimicking the Agent Handler call to ePO and passing the carefully constructed XML file through the API."}, {"lang": "es", "value": "Una vulnerabilidad de tipo External XML entity (XXE) en ePO versiones anteriores a la actualizaci\u00f3n 5.10 14, puede conllevar a que un atacante remoto no autenticado desencadene potencialmente un ataque de tipo Server Side Request Forgery. Esto puede ser explotado al imitar la llamada del Manejador de Agentes a ePO y pasando el archivo XML cuidadosamente construido mediante la API"}], "lastModified": "2022-10-20T12:44:21.107", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A30F7908-5AF6-4761-BC6A-4C18EFAE48E5", "versionEndExcluding": "5.10.0"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B00DDE7-7002-45BE-8EDE-65D964922CB0"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_10:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB88C165-BB24-49FB-AAF6-087A766D5AD1"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_11:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C879487A-3378-4C5D-9DA6-308D06B786A0"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_12:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "523E143F-E8B3-4B24-AD64-65BF5A8677A7"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_13:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3AF53482-AE68-40F8-8FA6-0A2DAC019A34"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7DE847E0-431D-497D-9C57-C4E59749F6A0"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46385384-5561-40AA-9FDE-A2DE4FDFAD3E"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7CA7CA6-7CF2-48F6-81B5-69BA0A37EF4E"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E4E5481-1070-4E1F-8679-1985DE4E785A"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9EEA681-67FF-43B3-8610-0FA17FD279E5"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C33BA8EA-793D-4E79-BE9C-235ACE717216"}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_9:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "823DBE80-CB8D-4981-AE7C-28F3FDD40451"}], "operator": "OR"}]}], "sourceIdentifier": "trellixpsirt@trellix.com"}