Re: McAfee ePolicy Orchestrator Authenticated XXE and Credential Exposure

Posted by Brandon Perry on Jan 12

After releasing this, I actually got quite a bit of flak (whatever happened
to responsible/coordinated disclosure?!).

Today, Space Rogue wrote a pretty good article about Full Disclosure:
https://twitter.com/spacerog/status/554704824705761280

I tend to agree with the post, and I feel that this vulnerability actually
is a great example of the points Space Rogue makes.

For instance, according to McAfee’s official KB article (…

Leave a Reply