CVE-2019-3662medium

CVE-2019-3662: medium-severity vulnerability in McAfee Advanced Threat Defense (ATD)

Advanced Threat Defense (ATD) - Path Traversal: '/absolute/pathname/here' vulnerability

Published · Updated

Follow this CVE+ Monitor Advanced Threat Defense

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 1.4%
Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to gain unintended access to files on the system via carefully constructed HTTP requests.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
McAfee · Advanced Threat Defense (ATD)
Related CVEs — McAfee Advanced Threat Defense (ATD)

In the same product, most dangerous first.

CVE-2017-4053—CVE-2017-4053EPSS 3.4%CVE-2017-4054—CVE-2017-4054EPSS 2.6%CVE-2017-4052—CVE-2017-4052EPSS 2.5%CVE-2017-4055—CVE-2017-4055EPSS 1.4%CVE-2017-4057—CVE-2017-4057EPSS 1.2%CVE-2019-3660HIGHAdvanced Threat Defense (ATD) - Improper Neutralization of HTTP requestsEPSS 1.2%