CVE-2021-30639

DoS after non-blocking IO error

A vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service. An error introduced as part of a change to improve error handling during non-blocking I/O meant that the error flag associated with the Request object was not reset between requests. This meant that once a non-blocking I/O error occurred, all future requests handled by that request object would fail. Users were able to trigger non-blocking I/O errors, e.g. by dropping a connection, thereby creating the possibility of triggering a DoS. Applications that do not use non-blocking I/O are not exposed to this vulnerability. This issue affects Apache Tomcat 10.0.3 to 10.0.4; 9.0.44; 8.5.64.

CVSS 3.1 · 7.5 High EPSS 6.9% KEV · Not listed

Vendors

Apache Mcafee Oracle

Products

Tomcat Epolicy Orchestrator Big Data Spatial And Graph

CVE-2021-2432

JDK: unspecified vulnerability fixed in 7u311 (JNDI)

Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

CVSS 3.1 · 3.7 Low EPSS 3.7% KEV · Not listed

Vendors

Mcafee Oracle Redhat

Products

Epolicy Orchestrator Jdk Rhel Extras

CVE-2021-2161

OpenJDK: Incorrect handling of partially quoted arguments in ProcessBuilder on Windows (Libraries, 8250568)

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. It can also be exploited by supplying untrusted data to APIs in the specified Component. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).

CVSS 3.1 · 5.9 Medium EPSS 3.5% KEV · Not listed

Vendors

Debian Fedoraproject Mcafee and 3 more

Products

Debian Linux Fedora Epolicy Orchestrator and 10 more

CVE-2021-23896

Cleartext Transmission of Sensitive Information in McAfee DBSec

Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insights Server used to pass data to the Insights Server. This user is restricted to only have access to DBSec data in the Insights Server.

CVSS 3.1 · 3.2 Low EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Database Security

CVE-2021-23895

Authorized deserialization of untrusted data in McAfee DBSec

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.

CVSS 3.1 · 9 Critical EPSS 1.9% KEV · Not listed

Vendors

Mcafee

Products

Database Security

CVE-2021-23894

Unauthorized deserialization of untrusted data in McAfee DBSec

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.

CVSS 3.1 · 9.6 Critical EPSS 2.2% KEV · Not listed

Vendors

Mcafee

Products

Database Security

CVE-2021-23893

Privilege Escalation vulnerability in McAfee Drive Encryption (MDE)

Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to gain elevated system privileges via exploiting an unutilized memory buffer.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Drive Encryption

CVE-2021-23891

Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by impersonating a client token which could lead to the bypassing of MTP self-defense.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Total Protection

CVE-2021-23890

McAfee ePO Information Leak vulnerability

Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows an unauthenticated user to download McAfee product packages (specifically McAfee Agent) available in ePO repository and install them on their own machines to have it managed and then in turn get policy details from the ePO server. This can only happen when the ePO Agent Handler is installed in a Demilitarized Zone (DMZ) to service machines not connected to the network through a VPN.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Epolicy Orchestrator

CVE-2021-23889

McAfee ePO Cross-site Scripting vulnerability

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Epolicy Orchestrator

CVE-2021-23888

McAfee ePO unvalidated URL redirect vulnerability

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user to load an untrusted site in an ePO iframe which could steal information from the authenticated user.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Epolicy Orchestrator

CVE-2021-23887

Privilege escalation in McAfee DLP Endpoint for Windows

Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to write to arbitrary controlled kernel addresses. This is achieved by launching applications, suspending them, modifying the memory and restarting them when they are monitored by McAfee DLP through the hdlphook driver.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Data Loss Prevention Endpoint

CVE-2021-23886

Local Denial of Service in McAfee DLP Endpoint for Windows

Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to cause a BSoD through suspending a process, modifying the processes memory and restarting it. This is triggered by the hdlphook driver reading invalid memory.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Data Loss Prevention Endpoint

CVE-2021-23885

Privilege escalation vulnerability in McAfee Web Gateway (MWG) UI

Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance via incorrect improper neutralization of user input in the troubleshooting page.

CVSS 3.1 · 9 Critical EPSS 1.1% KEV · Not listed

Vendors

Mcafee

Products

Web Gateway

CVE-2021-23884

Clear text exposure of password in McAfee CSR ePO extension

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (CSR) prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway (MWG) or the password of the McAfee Web Gateway Cloud Server (MWGCS) read only user used to retrieve log files for analysis in CSR.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Content Security Reporter

CVE-2021-23883

Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS)

A Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machine and had partial protection prior to this update.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Endpoint Security

CVE-2021-23882

Improper Access Control in the ENS installer

Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. This is only applicable to clean installations of ENS as the Access Control rules will prevent modification prior to up an upgrade.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Endpoint Security

CVE-2021-23881

Stored Cross Site Scripting in ENS

A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script to a policy event which will trigger the script to be run through a browser block page when a local non-administrator user triggers the policy.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Endpoint Security

CVE-2021-23880

Improper Access Control in the ENS installer

Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Endpoint Security

CVE-2021-23879

Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and ...

Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileges are required to place the files in the required location.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Endpoint Product Removal Tool