KLA10538 Multiple vulnerabilities in McAfee ATD

Multiple serious vulnerabilities have been found in McAfee ATD. Malicious users can exploit these vulnerabilities to obtain sensitive information or bypass security restrictions.

Below is a complete list of vulnerabilities

1. Improper access restrictions and other unknown vulnerabilities can be exploited remotely via an unknown vectors related to web interface;
2. An unknown vulnerability can be exploited remotely via a specially designed parameters.

Original advisories

McAfee security bulletin

Related products

McAfee-Advanced-Threat-Defense

CVE list

CVE-2015-3030 warning

CVE-2015-3029 warning

CVE-2015-3028 high

Solution

Update to the latest version

Get McAfee updates

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• McAfee Advanced Threat Defense versions earlier than 3.4.4.63