McAfee ePolicy Orchestrator Multiple Vulnerabilities

Last Update Date: 26 Feb 2018 09:49 Release Date: 26 Feb 2018 3309 Views

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in McAfee ePolicy Orchestrator, which could be exploited by attackers to perform denial of service, security restriction bypass and remote code execution on the targeted system.

Impact

Denial of Service
Remote Code Execution
Security Restriction Bypass

System / Technologies affected

Versions 5.9.1 and 5.9.0
Versions 5.3.3, 5.3.2, 5.3.1 and 5.3.0

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix :
http://www.mcafee.com/us/downloads/downloads.aspx

Vulnerability Identifier

Source

AusCERT