Design/Logic Flaw

2021-04-1508:15:00

PRIOn knowledge base

www.prio-n.com

4.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.0%

JSON

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.

CPENameOperatorVersion
advanced_threat_defenselt4.12.2

CPE	Name	Operator	Version
	advanced_threat_defense	lt	4.12.2

References

kc.mcafee.com/corporate/index?page=content&id=SB10336