CVE-2021-23888CWE-601

McAfee ePO unvalidated URL redirect vulnerability

Medium · published March 26, 2021

CVSS v3.1
6.3
EPSS
1%
Percentile
49.2
In the wild
Unconfirmed
What it is

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user to load an untrusted site in an ePO iframe which could steal information from the authenticated user.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00622 · 49.2th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2021-03-26T09:30Z
EPSS history
Timeline
  • 26 MAR 09:30Z
    McAfee ePO unvalidated URL redirect vulnerability
    cvelistv5