• info
• discussion
• exploit
• solution
• references

McAfee EPolicy Orchestrator Framework Service Directory Traversal Vulnerability

An exploit is not required. An attacker could carry out this attack with available client applications.