← CVE Intelligence

CVE-2020-7302

DLP ePO extension - Unrestricted Upload of File with Dangerous Type PUBLISHED

Description (CNA)

Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.

Affected (CNA)

Vendor / productVersions
McAfee / DLP ePO extensionaffected 11.3 before 11.3.28; affected 11.4 before 11.4.200; affected 11.5 before 11.5.3

CWE

CWE-434

References

ADP enrichment

CVE

No English description supplied.