PT-2017-6410 · Mcafee · Mcafee Cloud Analysis/Deconstructive Services

Publicado 2017-03-14 · Atualizado 2017-03-23 · CVE-2014-9921

Positive Technologies (AI Summary)

CVSS v2.0

9.7

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:P

Name of the Vulnerable Software and Affected Versions McAfee Cloud Analysis and Deconstructive Services (CADS) versions 1.0.0.3x, 1.0.0.4d and earlier

Description The issue is related to an information disclosure error in the configuration of McAfee Cloud Analysis and Deconstructive Services (CADS), allowing remote unauthenticated users to view, add, and remove users.

Recommendations For versions 1.0.0.3x, 1.0.0.4d and earlier, update to a version that fixes the configuration error to prevent unauthorized user management. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-9921

Produtos afetados

Mcafee Cloud Analysis/Deconstructive Services

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-9921 · Nota de Segurança
• https://kc.mcafee.com/corporate/index?page=content&id=SB10087 · Aviso do Fabricante