McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81.
Software | From | Fixed in |
---|---|---|
mcafee / epolicy_orchestrator | 2.5 | 2.5.x |
mcafee / epolicy_orchestrator | 2.5-sp1 | 2.5-sp1.x |
mcafee / epolicy_orchestrator | 2.5.1 | 2.5.1.x |
mcafee / epolicy_orchestrator | 3.0 | 3.0.x |
mcafee / epolicy_orchestrator | 3.0-sp2a | 3.0-sp2a.x |