PT-2017-16164 · Mcafee · Intel Security Mcafee Agent

Publicado 2017-02-13 · Atualizado 2017-07-26 · CVE-2017-3896

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Security McAfee Agent versions prior to 5.0.4.449

Description The issue concerns an unvalidated parameter vulnerability in the remote log viewing capability. This allows remote attackers to pass unexpected input parameters via a URL that was not completely validated.

Recommendations For versions prior to 5.0.4.449, update to version 5.0.4.449 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-3896

Produtos afetados

Intel Security Mcafee Agent

Referências · 5

• http://securityfocus.com/bid/95903 · Nota
• http://securitytracker.com/id/1037629 · Nota
• https://kc.mcafee.com/corporate/index?page=content&id=SB10183 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-3896 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-3896 · Aviso do Fabricante