Vulnerability Spotlight - McAfee ePolicy Orchestrator Data Channel Blind SQL Injection Vulnerability
Cisco Talos disclosed TALOS-2016-0229 / CVE-2016-8027, an exploitable blind SQL injection in McAfee ePolicy Orchestrator 5.3.0 that is reachable without user authentication. A crafted HTTP POST to the unauthenticated dcRedirect servlet is forwarded to the...