← CVE Intelligence

CVE-2021-23895

Authorized deserialization of untrusted data in McAfee DBSec PUBLISHED

Description (CNA)

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.

Affected (CNA)

Vendor / productVersions
McAfee,LLC / McAfee Database Security (DBSec)affected unspecified before 4.8.2

CWE

CWE-502

References

ADP enrichment

CVE

No English description supplied.