← CVE Intelligence

CVE-2021-23888

McAfee ePO unvalidated URL redirect vulnerability PUBLISHED

Description (CNA)

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user to load an untrusted site in an ePO iframe which could steal information from the authenticated user.

Affected (CNA)

Vendor / productVersions
McAfee,LLC / McAfee ePolicy Orchestrator (ePO)affected unspecified before 5.10 CU 10

CWE

CWE-601

References

ADP enrichment

CVE

No English description supplied.