title: External Entity Attack vulnerability in McAfee Common UI (CUI)
description: External Entity Attack vulnerability in the ePO extension in McAfee Common UI (CUI) 2.0.2 allows remote authenticated users to view confidential information via a crafted HTTP request parameter.
problem types: External Entity Attack vulnerability
affected:
{
platforms: x86
product: Common UI (CUI)
vendor: McAfee
versions:
status: affected, version: 2.0.2
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:L
version: 3.0
]