CVE-2021-23884

Published: Apr 15, 2021Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Exploitability: 0.7 / Impact: 3.6

Source: NVD

Description

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (CSR) prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway (MWG) or the password of the McAfee Web Gateway Cloud Server (MWGCS) read only user used to retrieve log files for analysis in CSR.

Affected (1)

Products: Mcafee: Content Security Reporter

1 product

Content Security Reporter

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mcafee Content Security Reporter	Before 2.8.0

Related CWEs

Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10353

Source: trellixpsirt@trellix.com

Broken Link

https://kc.mcafee.com/corporate/index?page=content&id=SB10353

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.