CVE-2020-7302 MEDIUM

CVE-2020-7302: DLP ePO extension - Unrestricted Upload of File with Dangerous Type

Vendor Mcafee
Product DLP ePO extension
Weakness CWE-434 · Unrestricted file upload
Published August 13, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

What the vulnerability does

01Description

Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.

Key dates

02Disclosure timeline

August 13, 2020 CVE published
August 4, 2024 Record updated