CVE-2017-4052 Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to change or update any conf...
CriticalCVSS 9.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to change or update any configuration settings, or gain administrator functionality via a crafted HTTP request parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee advanced threat defense | = 3.4 | No fix listed |
| mcafee advanced threat defense | = 3.6 | No fix listed |
| mcafee advanced threat defense | = 3.8 | No fix listed |
| mcafee advanced threat defense | = 3.10 | No fix listed |
| mcafee Advanced Threat Defense (ATD) | = 3.10 | No fix listed |
| mcafee Advanced Threat Defense (ATD) | = 3.8 | No fix listed |
| mcafee Advanced Threat Defense (ATD) | = 3.6 | No fix listed |
| mcafee Advanced Threat Defense (ATD) | = 3.4 | No fix listed |
References
- 99557 vdb-entry
- kc.mcafee.com patch vendor-advisory