CVE-2017-4053

Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to execute a command of their choice via a crafted HTTP request parameter...

CVE-2017-4055

Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to bypass ATD detection via loose enforcement of authentication and authorization...

CVE-2017-4055

Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to bypass ATD detection via loose enforcement of authentication and authorization...

CVE-2017-4057

Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI terminal commands...

CVE-2017-4052

CVE-2017-4052 concerns McAfee Advanced Threat Defense (ATD). The connected sources confirm an authentication bypass vulnerability in the web interface affecting ATD versions 3.10, 3.8, 3.6, and 3.4, allowing remote unauthenticated users to change or update arbitrary configuration settings or gain...

CVE-2017-4053

CVE-2017-4053 affects McAfee Advanced Threat Defense (ATD) web interface, with command injection in the HTTP parameter of ATD versions 3.10, 3.8, 3.6 and 3.4. The vulnerability allows remote unauthenticated attackers to execute arbitrary commands via a crafted request. Connected documents corrobo...

CVE-2017-4054

CVE-2017-4054 affects McAfee Advanced Threat Defense (ATD) web interface versions 3.4, 3.6, 3.8 and 3.10. The vulnerability is a Command Injection in the web interface that allows remote authenticated users to execute arbitrary commands via a crafted HTTP request parameter. The provided connected...

CVE-2017-4055

CVE-2017-4055 affects McAfee Advanced Threat Defense (ATD) Web Interface, with versions 3.10, 3.8, 3.6, and 3.4. The issue is a vulnerability in authentication/authorization enforcement that lets remote unauthenticated users bypass ATD detection via loose authentication checks, enabling bypass of...

CVE-2017-4057

The CVE-2017-4057 entry documents a Privilege Escalation in the web interface of McAfee Advanced Threat Defense (ATD) affecting versions 3.10, 3.8, 3.6 and 3.4. The vulnerability allows remote authenticated users to gain elevated privileges via the GUI or GUI terminal commands. The connected CNVD...

CVE-2017-4057: Undefined Security Weakness

Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI terminal commands...

CVE-2017-4055: Missing Authentication for Critical Function

Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to bypass ATD detection via loose enforcement of authentication and authorization...

CVE-2017-4054: Improper Neutralization of Special Elements used in a Command

Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to execute a command of their choice via a crafted HTTP request parameter...

CVE-2017-4053: Improper Neutralization of Special Elements used in an OS Command

Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to execute a command of their choice via a crafted HTTP request parameter...

CVE-2017-4052: Missing Authentication for Critical Function

Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to change or update any configuration settings, or gain administrator functionality via a crafted HTTP request parameter...

PT-2017-16185

Name of the Vulnerable Software and Affected Versions McAfee Advanced Threat Defense ATD versions 3.4 through 3.10 Description A privilege escalation issue exists in the web interface of McAfee Advanced Threat Defense ATD, allowing remote authenticated users to gain elevated privileges. This can ...

Sql injection

SQL injection vulnerability in Intel Security Advanced Threat Defense ATD Linux 3.6.0 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter...

Design/Logic Flaw

Detection bypass vulnerability in Intel Security Advanced Threat Defense ATD 3.4.6 and earlier allows malware samples to bypass ATD detection via renaming the malware...

CVE-2015-8990

Detection bypass vulnerability in Intel Security Advanced Threat Defense ATD 3.4.6 and earlier allows malware samples to bypass ATD detection via renaming the malware...

CVE-2017-3899

Vulnerability: CVE-2017-3899 affects Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 and earlier. Root cause: SQL injection via a crafted HTTP request parameter, leading to disclosure of product information. Impact: partial confidentiality loss; remote authenticated users can obtain info...

CVE-2015-8990

CVE-2015-8990 covers a detection bypass in Intel Security Advanced Threat Defense (ATD) 3.4.6 and earlier, where malware samples can evade ATD detection by renaming the malware. Affected product: Intel ATD; vulnerable component/behavior: detection logic bypass via filename renaming; root cause/im...