VULNERABILITY INTELLIGENCE

CVE-2021-23884

CVSS score4.3 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2021-04-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Description

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (CSR) prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway (MWG) or the password of the McAfee Web Gateway Cloud Server (MWGCS) read only user used to retrieve log files for analysis in CSR.

Weakness classification

  • trellixpsirt@trellix.com: CWE-319
  • nvd@nist.gov: CWE-319

Primary references