CVE-2019-3660

Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests.

Score

CVSS 3.1 8.8 High

Status

Modified - trellixpsirt@trellix.com

Published

2019-11-13

Last modified

2024-08-04

Affected products

• Advanced Threat Defense (Mcafee)
• Advanced Threat Defense Atd (Mcafee)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10304