Command injection

2017-07-1215:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.8%

JSON

Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to execute a command of their choice via a crafted HTTP request parameter.

CPENameOperatorVersion
advanced_threat_defenseeq3.10
advanced_threat_defenseeq3.8
advanced_threat_defenseeq3.4
advanced_threat_defenseeq3.6

Name	Operator	Version
advanced_threat_defense	eq	3.10
advanced_threat_defense	eq	3.8
advanced_threat_defense	eq	3.4
advanced_threat_defense	eq	3.6

References

www.securityfocus.com/bid/99559

kc.mcafee.com/corporate/index?page=content&id=SB10204