CVE-2021-31831: 
McAfee Database Security vulnerability analysis and mitigation

CVE-2021-31831 is a security vulnerability affecting McAfee Database Security (DBSec) versions prior to 4.8.2. The vulnerability was discovered and disclosed in June 2021, allowing remote authenticated attackers to access signed SQL scripts that have been marked as deleted or expired within the administrative console through the REST API (NVD).

The vulnerability is classified as CWE-552 (Files or Directories Accessible to External Parties). It has been assigned a CVSS v3.1 base score of 5.5 (Medium) by NIST with the vector string CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, while Trellix assigned a score of 4.9 (Medium) with the vector string CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L. The CVSS v2.0 base score is 6.5 (Medium) (NVD).

The vulnerability allows authenticated attackers to gain unauthorized access to signed SQL scripts that were previously marked as deleted or expired in the administrative console. This access is specifically available through the REST API interface, potentially compromising the confidentiality of sensitive database scripts (NVD).

The vulnerability has been addressed in McAfee Database Security version 4.8.2. Users are advised to upgrade to this version or later to mitigate the vulnerability (NVD).