CVE-2017-4055

HIGH

McAfee Advanced Threat Defense 3.4-3.10 - Unauthenticated Detection Bypass via Web Interface

Title source: llm

Description

Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to bypass ATD detection via loose enforcement of authentication and authorization.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/99564

Patch, Vendor Advisory x_refsource_confirm

https://kc.mcafee.com/corporate/index?page=content&id=SB10204

Scores

CVSS v3 7.5

EPSS 0.0087

EPSS Percentile 75.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE

CWE-306

Status published

Products (8)

McAfee/Advanced Threat Defense (ATD) 3.10

McAfee/Advanced Threat Defense (ATD) 3.6

McAfee/Advanced Threat Defense (ATD) 3.7

McAfee/Advanced Threat Defense (ATD) 3.8

mcafee/advanced_threat_defense 3.4

mcafee/advanced_threat_defense 3.6

mcafee/advanced_threat_defense 3.8

mcafee/advanced_threat_defense 3.10

Published Jul 12, 2017

Tracked Since Feb 18, 2026