Incorrect access to deleted scripts vulnerability in...
High severity
Unreviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Nov 24, 2023
Description
Published by the National Vulnerability Database
Jun 3, 2021
Published to the GitHub Advisory Database
May 24, 2022
Last updated
Nov 24, 2023
Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain access to signed SQL scripts which have been marked as deleted or expired within the administrative console. This access was only available through the REST API.
References