PT-2019-4244 · Mcafee · Mcafee Advanced Threat Defense

Published 2019-11-12 · Updated 2021-07-21 · CVE-2019-3649

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions McAfee Advanced Threat Defense versions prior to 4.8

Description The issue exists due to insufficient input validation, allowing a remote attacker to gain unauthorized access to protected information using specially crafted POST requests. This can lead to information disclosure, where remote authenticated attackers can access hashed credentials via carefully constructed POST requests that extract incorrectly recorded data from log files.

Recommendations For versions prior to 4.8, update to version 4.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the log files to minimize the risk of exploitation. Avoid using the vulnerable function related to log file handling until the issue is resolved.

Fix

RCE

Information Disclosure

Insertion into Log File

Weakness Enumeration

CWE-20

CWE-200

CWE-532

Related Identifiers

BDU:2019-04845

CVE-2019-3649

Affected Products

Mcafee Advanced Threat Defense

References · 5

• https://bdu.fstec.ru/vul/2019-04845 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3649 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3649 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10304 · Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10304 · Note