Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2018-6671

Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HTTP request.

  • Published: Jun 15, 2018
  • Updated: Nov 8, 2023
  • CVE: CVE-2018-6671
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:N/I:P/A:N

No CWE or OWASP classifications available.

Software From Fixed in
mcafee / epolicy_orchestrator 5.3.0 5.3.3.x
mcafee / epolicy_orchestrator 5.9.0 5.9.1.x