CVE-2021-23896
Cleartext Transmission of Sensitive Information in McAfee DBSec
Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insights Server used to pass data to the Insights Server. This user is restricted to only have access to DBSec data in the Insights Server.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Cleartext Transmission of Sensitive Information in McAfee DBSec
Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insights Server used to pass data to the Insights Server. This user is restricted to only have access to DBSec data in the Insights Server.
- Record
CVE-2021-23896- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-319
- Updated
- 2026-11-02
EUVDEUVD-2021-10822
Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insights Server used to pass data to the Insights Server. This user is restricted to only have access to DBSec data in the Insights Server.
- Record
EUVD-2021-10822- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-89hp-893v-jcmm No score
Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of...
Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insights Server used to pass data to the Insights Server. This user is restricted to only have access to DBSec data in the Insights Server.
- Record
GHSA-89hp-893v-jcmm- Weakness
- CWE-319
- Updated
- 2026-11-02
NVD
Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insights Server used to pass data to the Insights Server. This user is restricted to only have access to DBSec data in the Insights Server.
- Record
CVE-2021-23896- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N - CVSS 3.1
- 4.5 Medium
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 2.7 Low
AV:A/AC:L/Au:S/C:P/I:N/A:N - Weakness
- CWE-319
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-23896 is a low vulnerability (CVSS 3.2) in Mcafee Database Security, published June 2, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 10th percentile. No source names a fixed version.