CVE-2021-23895 — Authorized deserialization of untrusted data in McAfee DBSec
Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administ…
Published: 2021-06-02 · CVSS: 9.0 · CVSS 3.1
Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7