McAfee Database Security 4.8.0

CPE Details

McAfee Database Security 4.8.0
mcafee
database_security
4.8.0
2020-12-15
13h12 +00:00
2020-12-15
13h12 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:mcafee:database_security:4.8.0:*:*:*:*:*:*:*

Informations

Vendor

mcafee

Product

database_security

Version

4.8.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2021-31850 2021-12-08 10h00 +00:00 A denial-of-service vulnerability in Database Security (DBS) prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files in Windows system directories and other locations where sensitive data could be overwritten. The former could lead to a DoS, whilst the latter could lead to data destruction on the DBS server.
6.1
Moyen
CVE-2021-31830 2021-06-03 08h10 +00:00 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to embed JavaScript code when configuring the name of a database to be monitored. This would be triggered when any authorized user logs into the DBSec interface and opens the properties configuration page for this database.
5.9
Moyen
CVE-2021-31831 2021-06-03 08h10 +00:00 Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain access to signed SQL scripts which have been marked as deleted or expired within the administrative console. This access was only available through the REST API.
5.5
Moyen
CVE-2021-23896 2021-06-02 11h10 +00:00 Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insights Server used to pass data to the Insights Server. This user is restricted to only have access to DBSec data in the Insights Server.
4.5
Moyen
CVE-2021-23895 2021-06-02 11h05 +00:00 Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.
9
Critique
CVE-2021-23894 2021-06-02 11h05 +00:00 Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.
9.6
Critique