PT-2017-16167 · Intel · Intel Security Advanced Threat Defense (Atd) Linux

Published 2017-03-14 · Updated 2017-03-23 · CVE-2017-3899

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Security Advanced Threat Defense (ATD) Linux versions 3.6.0 and earlier

Description The issue allows remote authenticated users to obtain product information via a crafted HTTP request parameter.

Recommendations For Intel Security Advanced Threat Defense (ATD) Linux versions 3.6.0 and earlier, update to a version later than 3.6.0 to resolve the issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2017-3899

Affected Products

Intel Security Advanced Threat Defense (Atd) Linux

References · 4

• https://osv.dev/vulnerability/CVE-2017-3899 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3899 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10189 · Vendor Advisory
• http://securityfocus.com/bid/96929 · Vendor Advisory