CVE-2019-3604

ePolicy Orchestrator Cloud update fixes multiple Cross-Site Request Forgery vulnerabilities

Medium · published February 1, 2019

CVSS v3.0
4.8
EPSS
0%
Percentile
37.6
In the wild
Unconfirmed
What it is

Cross-Site Request Forgery (CSRF) vulnerability in McAfee ePO (legacy) Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors.

The record
Technical detail
CVSS v3.0
4.8 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00444 · 37.6th percentile
Published
2019-02-01T16:00Z
EPSS history
Timeline
  • 01 FEB 16:00Z
    ePolicy Orchestrator Cloud update fixes multiple Cross-Site Request Forgery vulnerabilities
    cvelistv5