CVE-2021-23884CWE-319

Clear text exposure of password in McAfee CSR ePO extension

Medium · published April 15, 2021

CVSS v3.1
4.3
EPSS
0%
Percentile
11.1
In the wild
Unconfirmed
What it is

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (CSR) prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway (MWG) or the password of the McAfee Web Gateway Cloud Server (MWGCS) read only user used to retrieve log files for analysis in CSR.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00213 · 11.1th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2021-04-15T07:30Z
EPSS history
Timeline
  • 15 APR 07:30Z
    Clear text exposure of password in McAfee CSR ePO extension
    cvelistv5