CVE-2016-8027

Critical

Published: 14/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query. This can result in disclosure of information within the database or impersonation of an agent without authentication via a specially crafted HTTP post.

Risk Assessment

Organizations may be exposed to the disclosure of sensitive data or unauthorized access to systems, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade to the latest version of McAfee ePolicy Orchestrator to mitigate this vulnerability and implement additional security measures such as input validation.

Original NVD description (English source)

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a specially crafted HTTP post.