CVE-2017-3898
A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS) versions prior to 16.0.3 allows network attackers to modify the Windows registry value associated with the McAfee update via the HTTP backend-response.
- Score
- CVSS 3.0 5.9 Medium
- Status
- Modified - secure@intel.com
- Published
- 2017-09-01
- Last modified
- 2024-09-16
- Weaknesses
- CWE-20
Affected products
References
- http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS102723
