CVE-2020-7302: falha de média gravidade em McAfee DLP ePO extension
DLP ePO extension - Unrestricted Upload of File with Dangerous Type
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 0.7%
Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
Produtos afetados
McAfee · DLP ePO extensionCVEs relacionadas — McAfee DLP ePO extension
No mesmo produto, das mais perigosas para as menos.
CVE-2020-7305MEDIUMDLP ePO extension - Privilege escalationEPSS 1.0%CVE-2020-7300MEDIUMDLP ePO extension - Improper AuthorizationEPSS 0.6%CVE-2020-7301MEDIUMDLP ePO extension - Cross site scriptingEPSS 0.5%CVE-2020-7304HIGHDLP ePO extension - Cross-site request forgeryEPSS 0.5%CVE-2020-7303MEDIUMDLP ePO extension - Cross-site scriptingEPSS 0.4%