PT-2017-16181 · Mcafee · Mcafee Advanced Threat Defense

Publicado 2017-07-12 · Atualizado 2017-07-17 · CVE-2017-4052

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Advanced Threat Defense (ATD) versions 3.4 through 3.10

Description The issue allows remote unauthenticated users to bypass authentication in the web interface, enabling them to change or update configuration settings or gain administrator functionality by sending a crafted HTTP request parameter.

Recommendations For versions 3.4 through 3.10, update to a version that includes a fix for this issue to prevent authentication bypass and unauthorized access to configuration settings.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2017-4052

Produtos afetados

Mcafee Advanced Threat Defense

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-4052 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-4052 · Aviso do Fabricante
• http://securityfocus.com/bid/99557 · Nota
• https://kc.mcafee.com/corporate/index?page=content&id=SB10204 · Aviso do Fabricante