McAfee ePolicy Orchestrator Multiple Vulnerabilities

Last Update Date: 21 Dec 2017 09:13 Release Date: 21 Dec 2017 4546 Views

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in McAfee ePolicy Orchestrator, which could be exploited by attackers to perform denial of service, elevation of privilege, remote code execution and sensitive information disclosure on the targeted system.

Impact

Denial of Service
Elevation of Privilege
Remote Code Execution
Information Disclosure

System / Technologies affected

Versions 5.1.3, 5.1.2, 5.1.1 and 5.1.0
Versions 5.3.3, 5.3.2, 5.3.1 and 5.3.0
Version 5.9.0

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix:
http://www.mcafee.com/us/downloads/downloads.aspx

Vulnerability Identifier

Source

AusCERT