← CVE Intelligence

CVE-2022-0842

ePO blind SQL Injection vulnerability PUBLISHED

Description (CNA)

A blind SQL injection vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote authenticated attacker to potentially obtain information from the ePO database. The data obtained is dependent on the privileges the attacker has and to obtain sensitive data the attacker would require administrator privileges.

Affected (CNA)

Vendor / productVersions
McAfee,LLC / McAfee ePolicy Orchestrator (ePO)affected unspecified before 5.10 CU 13

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.