| Package | Affected versions | Patched versions |
|---|---|---|
| epolicy orchestrator | = 2.0= 2.5= 2.5.1= 3.0= 3.5.0= 3.6.0= 3.6.1= 4.0= 4.5.0= 4.5.3= 4.5.4= 4.5.5= 4.6.0= 4.6.1= 4.6.2= 4.6.3= 4.6.4= 4.6.5≤ 4.5.6 |
Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free