SQL Injection in Mcafee Data Loss Prevention
CVE-2021-4088
SQL injection vulnerability in Data Loss Protection (DLP) ePO extension 11.8.x prior to 11.8.100, 11.7.x prior to 11.7.101, and 11.6.401 allows a remote authenticated attacker to inject unfiltered SQL into the DLP part of the ePO database. This could lead to remote code execution on the ePO server with privilege escalation.
Vulnerability class: SQL Injection
EPSS: 0.023 (81.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H.
Affected products
- Mcafee Data_loss_prevention — versions 11.6.401
- Mcafee,llc Mcafee Data Loss Prevention (Dlp) Epo Extension — versions 11.8.x, 11.7.x, 11.6.x
Weakness classification (CWE)
References
- trellixpsirt@trellix.com (x_refsource_CONFIRM, Broken Link)
Frequently asked questions
- What is CVE-2021-4088?
- CVE-2021-4088 is a high-severity vulnerability in Mcafee Data Loss Prevention, classified under SQL Injection. CVSS score: 8.4/10. Published 2022-01-24.
- How severe is CVE-2021-4088?
- High severity. CVSS v3 base score is 8.4 out of 10.