CVE-2017-3896
Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated.
- Score
- CVSS 3.0 5.9 Medium
- Status
- Modified - secure@intel.com
- Published
- 2017-02-13
- Last modified
- 2024-08-05
- Weaknesses
- CWE-20
Affected products
References
- http://www.securityfocus.com/bid/95903
- http://www.securitytracker.com/id/1037629
- https://kc.mcafee.com/corporate/index?page=content&id=SB10183