CVE-2021-23894: Unauthorized deserialization of untrusted data in McAfee DBSec
Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-23894.
What is the title of this vulnerability?
The title of this vulnerability is Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2.
What is the severity rating of CVE-2021-23894?
The severity rating of CVE-2021-23894 is critical with a score of 9.8.
How does CVE-2021-23894 affect McAfee Database Security?
CVE-2021-23894 affects McAfee Database Security (DBSec) prior to version 4.8.2.
How can an attacker exploit CVE-2021-23894?
A remote unauthenticated attacker can exploit CVE-2021-23894 by sending a carefully constructed Java serialized object to the DBSec server, allowing them to create a reverse shell with administrator privileges.