title: SB10240 - ePolicy Orchestrator (ePO) - Information disclosure vulnerablity
description: Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors.
problem types: Information disclosure vulnerability
affected:
{
product: ePolicy Orchestrator (ePO)
vendor: McAfee
versions:
lessThan: 5.3.3 with hotfix EPO5xHF1229850, status: affected, version: 5.3.0 through 5.3.3, versionType: custom
lessThan: 5.9.1 with hotfix EPO5xHF1229850, status: affected, version: 5.9.0 through 5.9.1, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N
version: 3.0
]