VULNERABILITY INTELLIGENCE
CVE-2018-6660
CVSS score6.2 MEDIUM
EPSS probability1.65%
CISA KEVNot currently listed
Published2018-04-02
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H
Description
Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file.
Weakness classification
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')