CVE-2021-23884

MEDIUM

McAfee Content Security Reporter < 2.8.0 - Cleartext Transmission of Sensitive Information

Title source: llm
STIX 2.1

Description

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (CSR) prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway (MWG) or the password of the McAfee Web Gateway Cloud Server (MWGCS) read only user used to retrieve log files for analysis in CSR.

References (1)

Core 1
Core References

Scores

CVSS v3 4.3
EPSS 0.0005
EPSS Percentile 15.5%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-319
Status published
Products (1)
mcafee/content_security_reporter < 2.8.0
Published Apr 15, 2021
Tracked Since Feb 18, 2026