CVE-2017-4055

Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to bypass ATD detection via loose enforcement of authentication and authorization.

Score

CVSS 3.0 7.5 High

Status

Modified - secure@intel.com

Published

2017-07-12

Last modified

2024-09-17

Weaknesses

CWE-306

Affected products

• Advanced Threat Defense (Mcafee)
• Advanced Threat Defense Atd (Mcafee)

References

• http://www.securityfocus.com/bid/99564
• https://kc.mcafee.com/corporate/index?page=content&id=SB10204