Skip to content
OpenAdvisories
High · 8.4 CVE-2019-3660 EUVD-2019-13295GHSA-3g23-34hp-r6rx

Advanced Threat Defense (ATD) - Improper Neutralization of HTTP requests

Published Nov 13, 2019 · Updated Aug 4, 2024 · Assigned by trellix

Description

Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests.

Affected products

VendorProductAffectedFixed
McAfee Advanced Threat Defense (ATD) unspecified – < 4.8 4.8

References