Privilege escalation in Mcafee Advanced_threat_defense
CVE-2019-3651
Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using the atduser credentials, which were too permissive.
Vulnerability class: Privilege Escalation
EPSS: 0.011 (61.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Mcafee Advanced_threat_defense
- Mcafee Advanced Threat Defense (Atd) — versions unspecified
Weakness classification (CWE)
References
- trellixpsirt@trellix.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-3651?
- CVE-2019-3651 is a high-severity vulnerability in Mcafee Advanced_threat_defense, classified under Improper Privilege Management. CVSS score: 8.8/10. Published 2019-11-13.
- How severe is CVE-2019-3651?
- High severity. CVSS v3 base score is 8.8 out of 10.