What is CVE-2021-31831?

CVE-2021-31831 is a medium-severity vulnerability in Mcafee Database Security, classified under Files or Directories Accessible to External Parties. CVSS score: 4.9/10. Published 2021-06-03.

How severe is CVE-2021-31831?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Vulnerability in Mcafee Database Security

CVE-2021-31831

Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain access to signed SQL scripts which have been marked as deleted or expired within the administrative console. This access was only available through the REST API.

EPSS: 0.006 (46.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L.

Affected products

Mcafee Database_security
Mcafee,llc Mcafee Database Security (Dbsec) — versions unspecified

Weakness classification (CWE)

CWE-552 — Files or Directories Accessible to External Parties

References

trellixpsirt@trellix.com (x_refsource_CONFIRM, Broken Link)

Frequently asked questions

What is CVE-2021-31831?: CVE-2021-31831 is a medium-severity vulnerability in Mcafee Database Security, classified under Files or Directories Accessible to External Parties. CVSS score: 4.9/10. Published 2021-06-03.
How severe is CVE-2021-31831?: Medium severity. CVSS v3 base score is 4.9 out of 10.