CVE-2019-3651

Advanced Threat Defense (ATD) - Information Disclosure vulnerability

High · published November 13, 2019

CVSS v3.1
8.8
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using the atduser credentials, which were too permissive.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01083 · 64.9th percentile
Published
2019-11-13T22:45Z
EPSS history
Timeline
  • 13 NOV 22:45Z
    Advanced Threat Defense (ATD) - Information Disclosure vulnerability
    cvelistv5