CVE-2013-0141

No fix known EPSS 1%

Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory.

Published 2013-05-01 · CVE record · OSV

Products: mcafee epolicy_orchestrator