CVE-2021-31831: Incorrect access to deleted scripts vulnerability in McAfee DBSec

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-03 · updated 2026-06-17
Weakness: CWE-552

Description

Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain access to signed SQL scripts which have been marked as deleted or expired within the administrative console. This access was only available through the REST API.

Affected products

McAfee,LLC McAfee Database Security (DBSec): before 4.8.2 — fixed in 4.8.2

How to fix

Upgrade to a fixed version: McAfee,LLC McAfee Database Security (DBSec) 4.8.2. Check the vendor advisory for mitigations.

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10359
https://kc.mcafee.com/corporate/index?page=content&id=SB10359

Get alerted when CVE-2021-31831 or the next vulnerability affects your stack