Skip to content
OpenAdvisories
Medium · 5.3 CVE-2019-3649 EUVD-2019-13284GHSA-x7j8-893h-w4j2

Advanced Threat Defense (ATD) - Information Disclosure vulnerability

Published Nov 13, 2019 · Updated Aug 4, 2024 · Assigned by trellix

Description

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to hashed credentials via carefully constructed POST request extracting incorrectly recorded data from log files.

Affected products

VendorProductAffectedFixed
McAfee Advanced Threat Defense (ATD) unspecified – < 4.8 4.8

References