CVE-2019-3663critical

CVE-2019-3663: fallo crítico en McAfee Advanced Threat Defense (ATD)

Advanced Threat Defense (ATD) - Unprotected storage of shared credentials vulnerability

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Advanced Threat Defense

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.8epss 0.9%
Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted in this being updated to Critical. The root password is common across all instances of ATD prior to 4.8. See the Security bulletin for further details
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
McAfee · Advanced Threat Defense (ATD)
CVEs relacionadas — McAfee Advanced Threat Defense (ATD)

En el mismo producto, de las más peligrosas a las menos.

CVE-2017-4053—CVE-2017-4053EPSS 3.4%CVE-2017-4054—CVE-2017-4054EPSS 2.6%CVE-2017-4052—CVE-2017-4052EPSS 2.5%CVE-2019-3662MEDIUMAdvanced Threat Defense (ATD) - Path Traversal: '/absolute/pathname/here' vulnerabilityEPSS 1.4%CVE-2017-4055—CVE-2017-4055EPSS 1.4%CVE-2017-4057—CVE-2017-4057EPSS 1.2%