CVE-2017-3896 Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters vi...
MediumCVSS 5.9
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee agent | = 5.0.0 | No fix listed |
| mcafee agent | = 5.0.1 | No fix listed |
| mcafee agent | = 5.0.2 | No fix listed |
| mcafee agent | = 5.0.3 | No fix listed |
| mcafee agent | = 5.0.4 | No fix listed |
| intel McAfee Agent | = 5.0.x versions prior to 5.0.4.449 | No fix listed |
References
- 95903 third-party-advisory vdb-entry
- 1037629 vdb-entry
- kc.mcafee.com vendor-advisory