Skip to content
OpenAdvisories
Critical · 9.8 Public exploit CVE-2019-3663 EUVD-2019-13298GHSA-538g-8rx5-rhf7

Advanced Threat Defense (ATD) - Unprotected storage of shared credentials vulnerability

Published Nov 13, 2019 · Updated Aug 4, 2024 · Assigned by trellix

Vendor: McAfee Product: Advanced Threat Defense (ATD)

Description

Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted in this being updated to Critical. The root password is common across all instances of ATD prior to 4.8. See the Security bulletin for further details

Affected products

VendorProductAffectedFixed
McAfee Advanced Threat Defense (ATD) prior to 4.8 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References