CVE-2021-23884

Clear text exposure of password in McAfee CSR ePO extension

State: Published
Severity: 4.3 Medium
Published: Apr 15, 2021
Updated: Aug 3, 2024
Reserved: Jan 12, 2021

Description

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (CSR) prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway (MWG) or the password of the McAfee Web Gateway Cloud Server (MWGCS) read only user used to retrieve log files for analysis in CSR.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N	trellix

Weaknesses

CWE-319 Cleartext Transmission of Sensitive Information

Affected Products

Product	Versions
McAfee Content Security Reporter (CSR)McAfee,LLC	before 2.8.0CWE-319: Cleartext Transmission of Sensitive InformationAffected

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10353

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.