PT-2017-16164 · Mcafee · Intel Security Mcafee Agent

Published 2017-02-13 · Updated 2017-07-26 · CVE-2017-3896

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Security McAfee Agent versions prior to 5.0.4.449

Description The issue concerns an unvalidated parameter vulnerability in the remote log viewing capability. This allows remote attackers to pass unexpected input parameters via a URL that was not completely validated.

Recommendations For versions prior to 5.0.4.449, update to version 5.0.4.449 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-3896

Affected Products

Intel Security Mcafee Agent

References · 5

• https://kc.mcafee.com/corporate/index?page=content&id=SB10183 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3896 · Security Note
• https://osv.dev/vulnerability/CVE-2017-3896 · Vendor Advisory
• http://securityfocus.com/bid/95903 · Note
• http://securitytracker.com/id/1037629 · Note