CVE-2015-2759: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allow remote attackers to hijack the authentication of users for requests that (1) obtain sensitive information or (2) modify the database via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2759?
CVE-2015-2759 has been rated as critical due to the potential for remote attackers to hijack user authentication.
How do I fix CVE-2015-2759?
To mitigate CVE-2015-2759, update McAfee Data Loss Prevention Endpoint to version 9.3 Patch 4 Hotfix 16 or later.
Who is affected by CVE-2015-2759?
CVE-2015-2759 affects users of McAfee Data Loss Prevention Endpoint versions prior to 9.3 Patch 4 Hotfix 16.
What types of attacks are possible with CVE-2015-2759?
CVE-2015-2759 allows attackers to execute cross-site request forgery (CSRF) attacks, potentially obtaining sensitive information or altering data.
What should I do if I cannot update to the fixed version for CVE-2015-2759?
If immediate updates are not possible for CVE-2015-2759, consider implementing application-level security measures to mitigate CSRF attacks.