CVE-2017-3896

MEDIUM

Intel Security McAfee Agent <5.0.4.449 - Unvalidated Parameter

Title source: llm
STIX 2.1

Description

Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/95903
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1037629

Scores

CVSS v3 5.9
EPSS 0.0095
EPSS Percentile 76.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (6)
Intel/McAfee Agent 5.0.x versions prior to 5.0.4.449
mcafee/mcafee_agent 5.0.0
mcafee/mcafee_agent 5.0.1
mcafee/mcafee_agent 5.0.2
mcafee/mcafee_agent 5.0.3
mcafee/mcafee_agent 5.0.4
Published Feb 13, 2017
Tracked Since Feb 18, 2026