PT-2017-16184 · Mcafee · Mcafee Advanced Threat Defense

Publicado 2017-07-12 · Atualizado 2017-07-17 · CVE-2017-4055

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions McAfee Advanced Threat Defense (ATD) versions 3.4 through 3.10

Description The issue concerns the exploitation of an authentication vulnerability in the web interface, allowing remote unauthenticated users to bypass detection due to loose enforcement of authentication and authorization.

Recommendations For versions 3.4 through 3.10, update to a version that addresses the loose enforcement of authentication and authorization to prevent remote unauthenticated users from bypassing ATD detection.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2017-4055

Produtos afetados

Mcafee Advanced Threat Defense

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-4055 · Aviso do Fabricante
• https://kc.mcafee.com/corporate/index?page=content&id=SB10204 · Aviso do Fabricante
• http://securityfocus.com/bid/99564 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-4055 · Nota de Segurança