CVE-2017-3899: vulnerability in Intel Advanced Threat Defense (ATD)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.7%
In short
A flaw in Intel Security Advanced Threat Defense allows authenticated users to inject malicious SQL code through a web request, potentially exposing sensitive product information.
Technical detail
SQL injection vulnerability in ATD Linux 3.6.0 and earlier exists in HTTP request parameter handling. An authenticated attacker can craft malicious SQL queries to extract product data from the backend database without proper input sanitization.
Summary generated and translated by AI from the official description.
SQL injection vulnerability in Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter.
Affected products
Intel · Advanced Threat Defense (ATD)Related CVEs — Intel Advanced Threat Defense (ATD)
In the same product, most dangerous first.