CVE-2021-23884

MEDIO 4.3CVE-2021-23884 · Published 15/04/2021 · updated 17/06/2026

En resumen

CVE-2021-23884 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a content security reporter (mcafee).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.21%, mayor que el 11.7% de las vulnerabilidades.
Solución: actualizar a 2.8.0 o posterior.

Package	Affected versions	Patched versions
content security reporter mcafee	`< 2.8.0`	`2.8.0`

Description

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (CSR) prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway (MWG) or the password of the McAfee Web Gateway Cloud Server (MWGCS) read only user used to retrieve log files for analysis in CSR.

References

kc.mcafee.com/corporate/index · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free