CVE-2021-31831

Published: Jun 3, 2021Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Exploitability: 2.1 / Impact: 3.4

Source: NVD

Description

Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain access to signed SQL scripts which have been marked as deleted or expired within the administrative console. This access was only available through the REST API.

Affected (1)

Products: Mcafee: Database Security

1 product

Database Security

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mcafee Database Security	Before 4.8.2

Related CWEs

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10359

Source: trellixpsirt@trellix.com

Broken Link

https://kc.mcafee.com/corporate/index?page=content&id=SB10359

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.