CVE-2021-23896
LOWMcAfee Database Security < 4.8.2 - Cleartext Transmission of Sensitive Information in Administrator Interface
Title source: llmDescription
Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insights Server used to pass data to the Insights Server. This user is restricted to only have access to DBSec data in the Insights Server.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://kc.mcafee.com/corporate/index?page=content&id=SB10359
Scores
CVSS v3
3.2
EPSS
0.0004
EPSS Percentile
13.8%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
Details
CWE
CWE-319
Status
published
Products (1)
mcafee/database_security
< 4.8.2
Published
Jun 02, 2021
Tracked Since
Feb 18, 2026