Lucene search
TrellixCVELIST:CVE-2020-7302HistoryAug 13, 2020 - 2:50 a.m.
CVE-2020-7302 DLP ePO extension - Unrestricted Upload of File with Dangerous Type
2020-08-1302:50:13
CWE-434
trellix
www.cve.org
4
mcafee
dlp
unrestricted upload
CVSS3
5.4
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
29.4%
Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.
CNA Affected
[
{
"product": "DLP ePO extension",
"vendor": "McAfee",
"versions": [
{
"lessThan": "11.3.28",
"status": "affected",
"version": "11.3",
"versionType": "custom"
},
{
"lessThan": "11.4.200",
"status": "affected",
"version": "11.4",
"versionType": "custom"
},
{
"lessThan": "11.5.3",
"status": "affected",
"version": "11.5",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2020-7302
2020-08-13 03:15:14
nvd
nvd
CVE-2020-7302
2020-08-13 03:15:14
prion
prion
Unrestricted file upload
2020-08-13 03:15:00
nessus
nessus
McAfee Data Loss Prevention ePO extension Multiple Vulnerabilities (SB10326)
2020-08-21 00:00:00
CVSS3
5.4
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
29.4%
Related for CVELIST:CVE-2020-7302