CVE-2021-23884
Medium
Description
Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (CSR) prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway (MWG) or the password of the McAfee Web Gateway Cloud Server (MWGCS) read only user used to retrieve log files for analysis in CSR.
SeverityMedium
CVSS4.3
Exploit probability—
ProductMcafee Content Security Reporter
PublishedApr 15, 2021
First seenApr 15, 2021
Weakness typeCWE-319CWE-319
How to fix
Update
- mcafee content_security_reporter2.8.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee content_security_reporter | v < 2.8.0 | 2.8.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.