Unrated severityNVD Advisory· Published Jun 2, 2021· Updated Aug 3, 2024
Authorized deserialization of untrusted data in McAfee DBSec
CVE-2021-23895
Description
Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.
Affected products
2<4.8.2+ 1 more
- (no CPE)range: <4.8.2
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- kc.mcafee.com/corporate/indexmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.