CVE-2022-0859 — Insufficiently Protected Credentials in LLC Mcafee Epolicy Orchestrator

CWE-522 — Insufficiently Protected Credentials4 documents4 sources
Severity
6.7MEDIUMNVD
CNA6.5CISA7.8
EPSS
0.0%
top 89.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mcafee LLC Mcafee Epolicy OrchestratorMcafee Epolicy Orchestrator
Timeline
PublishedMar 23
Latest updateMar 24

Description

McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a local attacker to point an ePO server to an arbitrary SQL server during the restoration of the ePO server. To achieve this the attacker would have to be logged onto the server hosting the ePO server (restricted to administrators) and to know the SQL server password.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5mcafee_llc/mcafee_epolicy_orchestratorunspecified — 5.10 CU 13

🔴Vulnerability Details

2
GHSA
GHSA-9533-g28x-xwf2: McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5↗2022-03-24
▶
CVEList
ePO database restoration vulnerability↗2022-03-23
▶

📋Vendor Advisories

1
CISA
Microsoft Win32k Privilege Escalation Vulnerability↗2021-11-03
▶
CVE-2022-0859 — Insufficiently Protected Credentials | cvebase