advanced_threat_defense Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/advanced_threat_defense/ Sun, 26 Feb 2023 06:43:01 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png advanced_threat_defense Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/advanced_threat_defense/ 32 32 CVE-2020-7269 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7269/ Sun, 26 Feb 2023 06:43:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7269/ Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.

The post CVE-2020-7269 appeared first on CVE Vulnerability.

]]> Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.

The post CVE-2020-7269 appeared first on CVE Vulnerability.

]]> CVE-2020-7270 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7270/ Sun, 26 Feb 2023 06:43:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7270/ Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.

The post CVE-2020-7270 appeared first on CVE Vulnerability.

]]> Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.

The post CVE-2020-7270 appeared first on CVE Vulnerability.

]]> CVE-2020-7254 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7254/ Sun, 26 Feb 2023 06:43:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7254/ Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.

The post CVE-2020-7254 appeared first on CVE Vulnerability.

]]> Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.

The post CVE-2020-7254 appeared first on CVE Vulnerability.

]]> CVE-2020-7262 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7262/ Sun, 26 Feb 2023 06:43:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7262/ Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request parameter.

The post CVE-2020-7262 appeared first on CVE Vulnerability.

]]> Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request parameter.

The post CVE-2020-7262 appeared first on CVE Vulnerability.

]]> CVE-2019-3643 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3643/ Sun, 26 Feb 2023 06:33:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3643/ McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This affects the scanning proxies.

The post CVE-2019-3643 appeared first on CVE Vulnerability.

]]> McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This affects the scanning proxies.

The post CVE-2019-3643 appeared first on CVE Vulnerability.

]]> CVE-2019-3644 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3644/ Sun, 26 Feb 2023 06:33:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3644/ McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies.

The post CVE-2019-3644 appeared first on CVE Vulnerability.

]]> McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies.

The post CVE-2019-3644 appeared first on CVE Vulnerability.

]]> CVE-2019-3649 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3649/ Sun, 26 Feb 2023 06:33:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3649/ Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to hashed credentials via carefully constructed POST request extracting incorrectly recorded data from log files.

The post CVE-2019-3649 appeared first on CVE Vulnerability.

]]> Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to hashed credentials via carefully constructed POST request extracting incorrectly recorded data from log files.

The post CVE-2019-3649 appeared first on CVE Vulnerability.

]]> CVE-2019-3650 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3650/ Sun, 26 Feb 2023 06:33:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3650/ Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via carefully constructed GET request extracting insecurely information stored in the database.

The post CVE-2019-3650 appeared first on CVE Vulnerability.

]]> Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via carefully constructed GET request extracting insecurely information stored in the database.

The post CVE-2019-3650 appeared first on CVE Vulnerability.

]]> CVE-2019-3651 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3651/ Sun, 26 Feb 2023 06:33:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3651/ Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using the atduser credentials, which were too permissive.

The post CVE-2019-3651 appeared first on CVE Vulnerability.

]]> Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using the atduser credentials, which were too permissive.

The post CVE-2019-3651 appeared first on CVE Vulnerability.

]]> CVE-2019-3660 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3660/ Sun, 26 Feb 2023 06:33:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3660/ Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests.

The post CVE-2019-3660 appeared first on CVE Vulnerability.

]]> Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests.

The post CVE-2019-3660 appeared first on CVE Vulnerability.

]]>