Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Import and Export Framework in McAfee ePolicy Orchestrator (ePO) before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity (XXE) issue.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
McAfee ePolicy Orchestrator 安全漏洞
Vulnerability Description
Intel McAfee ePolicy Orchestrator（ePO）是美国英特尔（Intel）公司（原McAfee公司）的一套可扩展的安全管理软件。该软件可对终端、网络、内容安全和合规解决方案实现集中的简化管理。 McAfee ePO 4.6.7 Hotfix 940148之前的版本中的Import和Export Framework中存在安全漏洞。远程攻击者可通过导入特制的XML文件利用该漏洞以添加‘dashboards’权限读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A