CVE-2020-7269CWE-200

Sensitive Information Exposure in McAfee ATD

Medium · published April 15, 2021

CVSS v3.1
4.9
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00726 · 53.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2021-04-15T08:00Z
EPSS history
Timeline
  • 15 APR 08:00Z
    Sensitive Information Exposure in McAfee ATD
    cvelistv5