CVE

Id
78184  
CVE No.
CVE-2015-0921  
Status
Candidate  
Description
XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.  
Phase
Assigned (20150109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
714991 78184 CVE-2015-0921 FULLDISC:20150106 McAfee ePolicy Orchestrator Authenticated XXE and Credential Exposure  View
714992 78184 CVE-2015-0921 URL:http://seclists.org/fulldisclosure/2015/Jan/8  View
714993 78184 CVE-2015-0921 FULLDISC:20150112 Re: McAfee ePolicy Orchestrator Authenticated XXE and Credential Exposure  View
714994 78184 CVE-2015-0921 URL:http://seclists.org/fulldisclosure/2015/Jan/37  View
714995 78184 CVE-2015-0921 MISC:http://packetstormsecurity.com/files/129827/McAfee-ePolicy-Orchestrator-Authenticated-XXE-Credential-Exposure.html  View
714996 78184 CVE-2015-0921 MISC:https://gist.github.com/brandonprry/692e553975bf29aeaf2c  View
714997 78184 CVE-2015-0921 CONFIRM:https://kc.mcafee.com/corporate/index?page=content&id=SB10095  View
714998 78184 CVE-2015-0921 SECTRACK:1031519  View
714999 78184 CVE-2015-0921 URL:http://www.securitytracker.com/id/1031519  View
715000 78184 CVE-2015-0921 SECUNIA:61922  View
715001 78184 CVE-2015-0921 URL:http://secunia.com/advisories/61922  View
715002 78184 CVE-2015-0921 XF:macafee-cve20150921-info-disc(99950)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5878 JVNDB-2015-001198 libpng の pngrutil.c 内の png_read_IDAT_data 関数におけるバッファオーバーフローの脆弱性 libpng の pngrutil.c 内の png_read_IDAT_data 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2015-0973 78184 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001198.html  View