CVE-2017-4054
Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to execute a command of their choice via a crafted HTTP request parameter.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - secure@intel.com
- Published
- 2017-07-12
- Last modified
- 2024-09-16
- Weaknesses
- CWE-77
Affected products
References
- http://www.securityfocus.com/bid/99559
- https://kc.mcafee.com/corporate/index?page=content&id=SB10204
