CVE-2021-23894 — Unauthorized deserialization of untrusted data in McAfee DBSec
Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with admini…
Published: 2021-06-02 · CVSS: 9.6 · CVSS 3.1
Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7