CVEvulnerability

CVE-2013-0141

4.3 MEDIUM Published 2013-05-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-05-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:A/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-22

Description

Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory.

Affected configurations

• mcafee epolicy orchestrator (<= 4.5.6) • mcafee epolicy orchestrator 2.0 • mcafee epolicy orchestrator 2.5 • mcafee epolicy orchestrator 2.5.1 • mcafee epolicy orchestrator 3.0 • mcafee epolicy orchestrator 3.5.0 • mcafee epolicy orchestrator 3.6.0 • mcafee epolicy orchestrator 3.6.1 • mcafee epolicy orchestrator 4.0 • mcafee epolicy orchestrator 4.5.0 • mcafee epolicy orchestrator 4.5.3 • mcafee epolicy orchestrator 4.5.4 • mcafee epolicy orchestrator 4.5.5 • mcafee epolicy orchestrator 4.6.0 • mcafee epolicy orchestrator 4.6.1 • mcafee epolicy orchestrator 4.6.2 • mcafee epolicy orchestrator 4.6.3 • mcafee epolicy orchestrator 4.6.4 • mcafee epolicy orchestrator 4.6.5

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References