CVE-2018-6660 - Vulnerability Details

Vendors	Products
Mcafee	Epolicy Orchestrator

Link	Providers
http://www.securityfocus.com/bid/103392
http://www.securitytracker.com/id/1040884
https://kc.mcafee.com/corporate/index?page=content&id=SB10228

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "ePolicy Orchestrator (ePO)", "vendor": "McAfee", "versions": [{"status": "affected", "version": "5.3.2"}, {"status": "affected", "version": "5.3.1"}, {"status": "affected", "version": "5.3.0"}, {"status": "affected", "version": "5.9.0"}]}], "datePublic": "2018-03-09T00:00:00", "descriptions": [{"lang": "en", "value": "Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file."}], "metrics": [{"cvssV3_0": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "Directory Traversal vulnerability", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-05-17T09:57:01", "orgId": "01626437-bf8f-4d1c-912a-893b5eb04808", "shortName": "trellix"}, "references": [{"name": "103392", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/103392"}, {"name": "1040884", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1040884"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10228"}], "source": {"advisory": "SB10228", "discovery": "EXTERNAL"}, "title": "SB10228 ePO Directory Traversal vulnerability", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@mcafee.com", "DATE_PUBLIC": "2018-03-09T18:00:00.000Z", "ID": "CVE-2018-6660", "STATE": "PUBLIC", "TITLE": "SB10228 ePO Directory Traversal vulnerability"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "ePolicy Orchestrator (ePO)", "version": {"version_data": [{"affected": "=", "version_affected": "=", "version_name": "5.3.2", "version_value": "5.3.2"}, {"affected": "=", "version_affected": "=", "version_name": "5.3.1", "version_value": "5.3.1"}, {"affected": "=", "version_affected": "=", "version_name": "5.3.0", "version_value": "5.3.0"}, {"affected": "=", "version_affected": "=", "version_name": "5.9.0", "version_value": "5.9.0"}]}}]}, "vendor_name": "McAfee"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file."}]}, "impact": {"cvss": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H", "version": "3.0"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Directory Traversal vulnerability"}]}]}, "references": {"reference_data": [{"name": "103392", "refsource": "BID", "url": "http://www.securityfocus.com/bid/103392"}, {"name": "1040884", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1040884"}, {"name": "https://kc.mcafee.com/corporate/index?page=content&id=SB10228", "refsource": "CONFIRM", "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10228"}]}, "source": {"advisory": "SB10228", "discovery": "EXTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T06:10:11.322Z"}, "title": "CVE Program Container", "references": [{"name": "103392", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/103392"}, {"name": "1040884", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1040884"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10228"}]}]}, "cveMetadata": {"assignerOrgId": "01626437-bf8f-4d1c-912a-893b5eb04808", "assignerShortName": "trellix", "cveId": "CVE-2018-6660", "datePublished": "2018-04-02T13:00:00Z", "dateReserved": "2018-02-06T00:00:00", "dateUpdated": "2024-09-16T22:40:52.250Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : ePolicy Orchestrator (ePO) (string)

vendor : McAfee (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.3.2 (string)

}

1 : { »

status : affected (string)

version : 5.3.1 (string)

}

2 : { »

status : affected (string)

version : 5.3.0 (string)

}

3 : { »

status : affected (string)

version : 5.9.0 (string)

}

]

}

]

datePublic : 2018-03-09T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file. (string)

}

]

metrics : [ »

0 : { »

cvssV3_0 : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.2 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H (string)

version : 3.0 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Directory Traversal vulnerability (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2018-05-17T09:57:01 (string)

orgId : 01626437-bf8f-4d1c-912a-893b5eb04808 (string)

shortName : trellix (string)

}

references : [ »

0 : { »

name : 103392 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/103392 (string)

}

1 : { »

name : 1040884 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

]

url : http://www.securitytracker.com/id/1040884 (string)

}

2 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://kc.mcafee.com/corporate/index?page=content&id=SB10228 (string)

}

]

source : { »

advisory : SB10228 (string)

discovery : EXTERNAL (string)

}

title : SB10228 ePO Directory Traversal vulnerability (string)

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@mcafee.com (string)

DATE_PUBLIC : 2018-03-09T18:00:00.000Z (string)

ID : CVE-2018-6660 (string)

STATE : PUBLIC (string)

TITLE : SB10228 ePO Directory Traversal vulnerability (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : ePolicy Orchestrator (ePO) (string)

version : { »

version_data : [ »

0 : { »

affected : = (string)

version_affected : = (string)

version_name : 5.3.2 (string)

version_value : 5.3.2 (string)

}

1 : { »

affected : = (string)

version_affected : = (string)

version_name : 5.3.1 (string)

version_value : 5.3.1 (string)

}

2 : { »

affected : = (string)

version_affected : = (string)

version_name : 5.3.0 (string)

version_value : 5.3.0 (string)

}

3 : { »

affected : = (string)

version_affected : = (string)

version_name : 5.9.0 (string)

version_value : 5.9.0 (string)

}

]

}

]

}

vendor_name : McAfee (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file. (string)

}

]

}

impact : { »

cvss : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.2 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H (string)

version : 3.0 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Directory Traversal vulnerability (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 103392 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/103392 (string)

}

1 : { »

name : 1040884 (string)

refsource : SECTRACK (string)

url : http://www.securitytracker.com/id/1040884 (string)

}

2 : { »

name : https://kc.mcafee.com/corporate/index?page=content&id=SB10228 (string)

refsource : CONFIRM (string)

url : https://kc.mcafee.com/corporate/index?page=content&id=SB10228 (string)

}

]

}

source : { »

advisory : SB10228 (string)

discovery : EXTERNAL (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T06:10:11.322Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 103392 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/103392 (string)

}

1 : { »

name : 1040884 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

2 : x_transferred (string)

]

url : http://www.securitytracker.com/id/1040884 (string)

}

2 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://kc.mcafee.com/corporate/index?page=content&id=SB10228 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 01626437-bf8f-4d1c-912a-893b5eb04808 (string)

assignerShortName : trellix (string)

cveId : CVE-2018-6660 (string)

datePublished : 2018-04-02T13:00:00Z (string)

dateReserved : 2018-02-06T00:00:00 (string)

dateUpdated : 2024-09-16T22:40:52.250Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "5F3977FF-A202-4679-B848-ED1B3A1C98A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "3D0E33E0-5B8F-4448-A5F3-5AE901AC8774", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "E9220E40-8664-4DB3-AF96-802F8CDEC58A", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "DEB90C24-D252-4099-A7A1-9F8754DFB4A5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file."}, {"lang": "es", "value": "Vulnerabilidad de salto de directorio en McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 y 5.9.0 permite que los administradores utilicen flujos de datos de Windows alternativos. Esto se podr\u00eda usar para omitir las extensiones de archivo mediante una validaci\u00f3n incorrecta de la ruta cuando se exporta un archivo XML espec\u00edfico."}], "id": "CVE-2018-6660", "lastModified": "2024-11-21T04:11:04.330", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H", "version": "3.0"}, "exploitabilityScore": 1.0, "impactScore": 4.7, "source": "trellixpsirt@trellix.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 1.2, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-04-02T13:29:00.280", "references": [{"source": "trellixpsirt@trellix.com", "url": "http://www.securityfocus.com/bid/103392"}, {"source": "trellixpsirt@trellix.com", "url": "http://www.securitytracker.com/id/1040884"}, {"source": "trellixpsirt@trellix.com", "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10228"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/103392"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id/1040884"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10228"}], "sourceIdentifier": "trellixpsirt@trellix.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 5F3977FF-A202-4679-B848-ED1B3A1C98A4 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 3D0E33E0-5B8F-4448-A5F3-5AE901AC8774 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.2:*:*:*:*:*:*:* (string)

matchCriteriaId : E9220E40-8664-4DB3-AF96-802F8CDEC58A (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:* (string)

matchCriteriaId : DEB90C24-D252-4099-A7A1-9F8754DFB4A5 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file. (string)

}

1 : { »

lang : es (string)

value : Vulnerabilidad de salto de directorio en McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 y 5.9.0 permite que los administradores utilicen flujos de datos de Windows alternativos. Esto se podría usar para omitir las extensiones de archivo mediante una validación incorrecta de la ruta cuando se exporta un archivo XML específico. (string)

}

]

id : CVE-2018-6660 (string)

lastModified : 2024-11-21T04:11:04.330 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : NONE (string)

baseScore : 4 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:S/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 8 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.2 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 1 (number)

impactScore : 4.7 (number)

source : trellixpsirt@trellix.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 4.9 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 1.2 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2018-04-02T13:29:00.280 (string)

references : [ »

0 : { »

source : trellixpsirt@trellix.com (string)

url : http://www.securityfocus.com/bid/103392 (string)

}

1 : { »

source : trellixpsirt@trellix.com (string)

url : http://www.securitytracker.com/id/1040884 (string)

}

2 : { »

source : trellixpsirt@trellix.com (string)

url : https://kc.mcafee.com/corporate/index?page=content&id=SB10228 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.securityfocus.com/bid/103392 (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.securitytracker.com/id/1040884 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://kc.mcafee.com/corporate/index?page=content&id=SB10228 (string)

}

]

sourceIdentifier : trellixpsirt@trellix.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-22 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Changed

Confidentiality Impact None

Integrity Impact Low

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Changed

Confidentiality Impact None

Integrity Impact Low

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object