PT-2017-6410 · Mcafee · Mcafee Cloud Analysis/Deconstructive Services

Published 2017-03-14 · Updated 2017-03-23 · CVE-2014-9921

Positive Technologies (AI Summary)

CVSS v2.0

9.7

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:P

Name of the Vulnerable Software and Affected Versions McAfee Cloud Analysis and Deconstructive Services (CADS) versions 1.0.0.3x, 1.0.0.4d and earlier

Description The issue is related to an information disclosure error in the configuration of McAfee Cloud Analysis and Deconstructive Services (CADS), allowing remote unauthenticated users to view, add, and remove users.

Recommendations For versions 1.0.0.3x, 1.0.0.4d and earlier, update to a version that fixes the configuration error to prevent unauthorized user management. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-9921

Affected Products

Mcafee Cloud Analysis/Deconstructive Services

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-9921 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10087 · Vendor Advisory