2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2013-0141" ,
"sourceIdentifier" : "cret@cert.org" ,
"published" : "2013-05-01T12:00:07.850" ,
2024-11-22 19:15:24 +00:00
"lastModified" : "2024-11-21T01:46:55.883" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory."
} ,
{
"lang" : "es" ,
"value" : "Vulnerabilidad de salto de directorio en McAfee ePolicy Orchestrator (ePO) anterior a 4.5.7 y 4.6.x anterior a 4.6.6, permite a atacantes remotos la subida arbitraria de archivos a trav\u00e9s de una petici\u00f3n manipulada sobre el canal de comunicaci\u00f3n del Agent-Server como se ha demostrado sobrescribiendo el directorio Software/."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:N" ,
2024-11-22 19:15:24 +00:00
"baseScore" : 4.3 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "ADJACENT_NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
2024-11-22 19:15:24 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 5.5 ,
"impactScore" : 4.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-22"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "4.5.6" ,
"matchCriteriaId" : "511A501F-0B62-468C-8F2E-55CD489614B7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:2.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "40083131-9ED1-4610-AD8D-DA3851B64709"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:2.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "45FDC5E3-73CE-4316-B24B-FA459CE91206"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:2.5:sp1:*:*:*:*:*:*" ,
"matchCriteriaId" : "FD117AAD-FEDB-4D56-A42A-88680C0AA744"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:2.5.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DAE37B45-85CC-4AD9-B78E-1AECEF96B190"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5FC513A6-0498-4215-A9AD-8F81DEE21B71"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:sp2a:*:*:*:*:*:*" ,
"matchCriteriaId" : "C57BFF74-7A66-4CAD-9D29-104BC63330C5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.5.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "669E3151-6092-48F5-9D45-310323ABADDA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5D19AB5C-7104-4C27-9249-F7F0A9BA251A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3471F008-87C3-4E91-A11C-212861191F23"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "485DB16F-730A-44B2-A255-2583AB27DB9C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1C721D48-5D9B-4BFF-8A7F-6E88D1F78F34"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B6131764-811B-4302-B160-D6447D20795E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4773B847-1E1D-4106-88CF-35E38412466E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "ADCCFECD-BFB3-415D-B381-D0FC714E8434"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D84606C7-E033-4864-A527-C75F4B7A307E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9F4A1B55-452B-4D1F-908E-795197974F4E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D5A2CABB-0BCB-4266-BA58-9FC81E89555C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E0080A5E-19E2-4BAA-BA80-1904A774CF8B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3171A1A7-E1B6-4957-BABE-DC0997ACB27B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F9284BEB-25CF-4888-AFDD-0073080361BE"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://seclists.org/fulldisclosure/2014/Apr/289" ,
"source" : "cret@cert.org"
} ,
{
"url" : "http://www.kb.cert.org/vuls/id/209131" ,
"source" : "cret@cert.org" ,
"tags" : [
"US Government Resource"
]
} ,
{
"url" : "http://www.us-cert.gov/ncas/alerts/TA13-193A" ,
"source" : "cret@cert.org"
} ,
{
"url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10042" ,
"source" : "cret@cert.org" ,
"tags" : [
"Vendor Advisory"
]
2024-11-22 19:15:24 +00:00
} ,
{
"url" : "http://seclists.org/fulldisclosure/2014/Apr/289" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.kb.cert.org/vuls/id/209131" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"US Government Resource"
]
} ,
{
"url" : "http://www.us-cert.gov/ncas/alerts/TA13-193A" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10042" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}
