Description
Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| McAfee,LLC | McAfee Advanced Threat Defense (ATD) | unspecified – < 4.12.2 | 4.12.2 |