CVE-2022-0842: 
McAfee ePolicy Orchestrator vulnerability analysis and mitigation

A blind SQL injection vulnerability was identified in McAfee Enterprise ePolicy Orchestrator (ePO) prior to version 5.10 Update 13. The vulnerability, tracked as CVE-2022-0842, was discovered and disclosed in March 2022, affecting the ePO database system (NVD, CVE Mitre).

The vulnerability is classified as a blind SQL injection that allows remote authenticated attackers to potentially extract information from the ePO database. The severity of the vulnerability is dependent on the attacker's privilege level, with administrator privileges required to access sensitive data (CVE Mitre).

The impact of this vulnerability is primarily focused on data exposure from the ePO database. The extent of data that can be accessed is directly tied to the privilege level of the attacker's account, with the most severe impact possible when the attacker has administrator privileges (NVD).

The vulnerability has been addressed in McAfee Enterprise ePolicy Orchestrator (ePO) version 5.10 Update 13. Organizations are advised to upgrade to this version or later to mitigate the risk (NVD).