| Package | Affected versions | Patched versions |
|---|---|---|
| mcafee agent | = 5.0.0≤ 4.8.0 |
The log viewer in McAfee Agent (MA) before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO server" option is disabled, allows remote attackers to conduct clickjacking attacks via a crafted web page, aka an "http-generic-click-jacking" vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free