VULNERABILITY INTELLIGENCE

CVE-2021-31831

CVSS score4.9 MEDIUM
EPSS probability0.64%
CISA KEVNot currently listed
Published2021-06-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Description

Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain access to signed SQL scripts which have been marked as deleted or expired within the administrative console. This access was only available through the REST API.

Weakness classification

  • trellixpsirt@trellix.com: CWE-552
  • nvd@nist.gov: CWE-552

Primary references