CVE-2021-23896CWE-319

Cleartext Transmission of Sensitive Information in McAfee DBSec

Low · published June 2, 2021

CVSS v3.1
3.2
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insights Server used to pass data to the Insights Server. This user is restricted to only have access to DBSec data in the Insights Server.

The record
Technical detail
CVSS v3.1
3.2 · LOW
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.9th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2021-06-02T13:10Z
EPSS history
Timeline
  • 02 JUN 13:10Z
    Cleartext Transmission of Sensitive Information in McAfee DBSec
    cvelistv5