CVE-2015-2759
Multiple cross-site request forgery (CSRF) vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allow remote attackers to hijack the authentication of users for requests that (1) obtain sensitive information or (2) modify the database via unspecified vectors.
- Score
- CVSS 2.0 6.8 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2015-03-27
- Last modified
- 2024-08-06
- Weaknesses
- CWE-352
Affected products
References
- http://www.securityfocus.com/bid/73403
- https://kc.mcafee.com/corporate/index?page=content&id=SB10111
