MS15-038: Description of the security update for Windows: April 14, 2015 (KB3045999)

None None...

McAfee Advanced Threat Defense Information Disclosure Vulnerability (CNVD-2015-02280)

McAfee Advanced Threat Defense provides advanced threat defense that defends against advanced malware, including zero-day persistent threats and advanced persistent threats. McAfee Advanced Threat Defense fails to properly restrict access, allowing remotely authenticated attackers to gain access ...

McAfee Advanced Threat Defense Security Bypass Vulnerability

McAfee Advanced Threat Defense provides advanced threat defense that defends against advanced malware, including zero-day persistent threats and advanced persistent threats. McAfee Advanced Threat Defense has a security vulnerability that could allow a remotely authenticated attacker to bypass...

McAfee Advanced Threat Defense Information Disclosure Vulnerability (CNVD-2015-02279)

McAfee Advanced Threat Defense provides advanced threat defense that defends against advanced malware, including zero-day persistent threats and advanced persistent threats. A security vulnerability in the McAfee Advanced Threat Defense WEB interface allows a remote, authenticated attacker to...

CVE-2015-3030

The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to obtain sensitive configuration information via unspecified vectors...

CVE-2015-3029

The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 does not properly restrict access, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2015-3028

McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted parameters...

Information disclosure

The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 does not properly restrict access, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

Information disclosure

The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to obtain sensitive configuration information via unspecified vectors...

Design/Logic Flaw

McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted parameters...

CVE-2015-3029

CVE-2015-3029 affects McAfee Advanced Threat Defense (MATD) before version 3.4.4.63. The web interface does not properly restrict access, allowing remote authenticated users to obtain sensitive information via unspecified vectors (information disclosure). Affected product/version: MATD

CVE-2015-3030

CVE-2015-3030 affects McAfee Advanced Threat Defense (MATD) web interface prior to version 3.4.4.63. The vulnerability allows remote authenticated users to obtain sensitive configuration information via unspecified vectors (information disclosure). Impact is limited to disclosure of configuration...

CVE-2015-3028

McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted parameters...

CVE-2015-3028

The CVE-2015-3028 entry affects McAfee Advanced Threat Defense (MATD) versions prior to 3.4.4.63. The issue allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted parameters, indicating an access-control weakness that enables conf...

CVE-2015-3029

The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 does not properly restrict access, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2015-3030

The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to obtain sensitive configuration information via unspecified vectors...

KLA10538 Multiple vulnerabilities in McAfee ATD

Multiple serious vulnerabilities have been found in McAfee ATD. Malicious users can exploit these vulnerabilities to obtain sensitive information or bypass security restrictions. Below is a complete list of vulnerabilities 1. Improper access restrictions and other unknown vulnerabilities can be...

McAfee ePO DLPe Extension < 9.3.416.4 Multiple Vulnerabilities (SB10111)

The remote McAfee ePO server has a version of the McAfee Data Loss Protection Endpoint DLPe installed that is affected by multiple vulnerabilities : - The ePO extension is affected by an unspecified denial of service vulnerability via a database lock or license corruption, which can be exploited ...

McAfee Email Gateway Digest Token Reflected XSS (SB10099)

The remote host has a version of McAfee Email Gateway MEG installed that is affected by a reflected cross-site scripting vulnerability due to improper validation of user-supplied input to unspecified tokens in digest messages. A remote attacker can exploit this, via a specially crafted request, t...

McAfee Data Loss Prevention Endpoint EPO Extended Cross-Site Request Forgery Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. A cross-site request forgery vulnerability exists in the McAfee Data Loss Prevention Endpoint DLPe epo extension, which allows remote attackers to construct malicious...