CVE-2018-6672 MEDIUM

CVE-2018-6672: SB10240 - ePolicy Orchestrator (ePO) - Information disclosure vulnerablity

Vendor Mcafee
Product ePolicy Orchestrator (ePO)
Published June 15, 2018
Last update August 5, 2024

CVSS base score

5.7/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors.

Key dates

02Disclosure timeline

June 15, 2018 CVE published
August 5, 2024 Record updated