medium5.9Public exploit code
CVE-2017-3898
A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS) versions prior to 16.0.3 allows network…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- McAfee LiveSafe 16.0.3 - Man In The Middle Registry Modification Leading to Remote Command Execution2017-09-07 · webapps · hardware
Impact
A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS) versions prior to 16.0.3 allows network attackers to modify the Windows registry value associated with the McAfee update via the HTTP backend-response.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mcafee | Livesafe | through 16.0.2 |