CVE-2015-8765: High severity mcafee epolicy orchestrator vulnerability
Intel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute arbitrary code via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8765?
CVE-2015-8765 has been classified with a high severity rating due to the potential for remote code execution by attackers.
How do I fix CVE-2015-8765?
To remediate CVE-2015-8765, upgrade Intel McAfee ePolicy Orchestrator to version 5.1.3 Hotfix 1106041 or 5.3.1 Hotfix 1106041 or later.
Which versions of ePolicy Orchestrator are affected by CVE-2015-8765?
CVE-2015-8765 affects ePolicy Orchestrator versions 4.6.9 and earlier, as well as 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041.
What type of attack is possible with CVE-2015-8765?
CVE-2015-8765 allows remote attackers to execute arbitrary code by exploiting a vulnerability related to crafted serialized Java objects.
Is there a workaround for CVE-2015-8765?
There are no known workarounds for CVE-2015-8765; upgrading to an unaffected version is the recommended approach.