Vulnerabilities > CVE-2019-3660 - Unspecified vulnerability in Mcafee Advanced Threat Defense

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

mcafee

NVD

Published: 2019-11-13

Updated: 2023-11-07

Summary

Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests.

Vulnerable Configurations

Part	Description	Count
Application	Mcafee Mcafee Advanced Threat Defense 3.4 Mcafee Advanced Threat Defense 3.4.2.32 Mcafee Advanced Threat Defense 3.4.4.14 Mcafee Advanced Threat Defense 3.4.4.142 Mcafee Advanced Threat Defense 3.4.6 Mcafee Advanced Threat Defense 3.6 Mcafee Advanced Threat Defense 3.6.2 Mcafee Advanced Threat Defense 3.8 Mcafee Advanced Threat Defense 3.8.0 Mcafee Advanced Threat Defense 3.10 Mcafee Advanced Threat Defense 4.0 Mcafee Advanced Threat Defense 4.0.4 Mcafee Advanced Threat Defense 4.0.6 Mcafee Advanced Threat Defense 4.2 Mcafee Advanced Threat Defense 4.2.2 Mcafee Advanced Threat Defense 4.4 Mcafee Advanced Threat Defense 4.4.2 Mcafee Advanced Threat Defense 4.6 Mcafee Advanced Threat Defense 4.6.2	19

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10304