What is CVE-2021-23884?

CVE-2021-23884 is a medium-severity vulnerability in Mcafee Content Security Reporter, classified under Cleartext Transmission of Sensitive Information. CVSS score: 4.3/10. Published 2021-04-15.

How severe is CVE-2021-23884?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Mcafee Content Security Reporter

CVE-2021-23884

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (CSR) prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway (MWG) or the password of the McAfee Web Gateway Cloud Server (MWGCS) read only user used to retrieve log files for analysis in CSR.

EPSS: 0.002 (11.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N.

Affected products

Mcafee Content_security_reporter
Mcafee,llc Mcafee Content Security Reporter (Csr) — versions unspecified

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

References

trellixpsirt@trellix.com (x_refsource_CONFIRM, Broken Link)

Frequently asked questions

What is CVE-2021-23884?: CVE-2021-23884 is a medium-severity vulnerability in Mcafee Content Security Reporter, classified under Cleartext Transmission of Sensitive Information. CVSS score: 4.3/10. Published 2021-04-15.
How severe is CVE-2021-23884?: Medium severity. CVSS v3 base score is 4.3 out of 10.