CVE-2014-2586

EPSS 3.2%

Cross-site scripting (XSS) vulnerability in the login audit form in McAfee Cloud Single Sign On (SSO) allows remote attackers to inject arbitrary web script or HTML via a crafted password.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.com/files/125775/McAfee-Cloud-SSO-Asset-Manager-Issues.htmlunverified cve_referencewww.exploit-db.com/exploits/32368unverified exploitdbwww.exploit-db.com/exploits/32368unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/125775/McAfee-Cloud-SSO-Asset-Manager-Issues.html http://seclists.org/fulldisclosure/2014/Mar/325 https://twitter.com/BrandonPrry/status/445969380656943104 http://www.exploit-db.com/exploits/32368 http://www.securityfocus.com/bid/66302