Directory Traversal Vulnerability in McAfee ePolicy Orchestrator

CVE-2017-3980

What is CVE-2017-3980?

A directory traversal vulnerability exists in the ePO Extension of McAfee ePolicy Orchestrator, allowing remote authenticated users to exploit this flaw. By leveraging an authenticated ePO session, attackers can execute arbitrary commands on the system, potentially leading to unauthorized access and control over the affected environment. This type of vulnerability raises significant security concerns, necessitating prompt action for affected users to mitigate associated risks.

References