CVE Feed

    Dashboard / CVE / CVE-2021-31850

    CVE-2021-31850

    A denial-of-service vulnerability in Database Security (DBS) prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files in Windows system directories and other locations where sensitive data could be overwritten. The former could lead to a DoS, whilst the latter could lead to data destruction on the DBS server.

    Published:Dec 8, 2021
    Last Modified:Nov 21, 2024
    EPS:Dec 8, 2021
    EPSS Score:0.00285
    CVSS Score:6.1

    Affected Products

    Vendor
    Mcafee
    Product
    Database Security
    Vendor
    Microsoft
    Product
    Windows

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-150 Collect Data from Common Resource Locations
    CAPEC-639 Probe System Files

    Related CVEs

    CVE-2021-31830 (CVSS 5.9) — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in McAfee D…
    CVE-2021-31831 (CVSS 4.9) — Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a …
    CVE-2021-23896 (CVSS 3.2) — Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Databas…
    CVE-2021-23895 (CVSS 9) — Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a re…
    CVE-2021-23894 (CVSS 9.6) — Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a re…
    CVE-2020-7339 (CVSS 6.3) — Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor p…
    CVE-2019-3615 (CVSS 5.3) — Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High