NetSight
high8.8

CVE-2017-4054

Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to execute a…

Impact

Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to execute a command of their choice via a crafted HTTP request parameter.

Affected products

VendorProductAffected versions
McafeeAdvanced Threat Defense
Versions 3.4, 3.6, 3.8, 3.10

Weakness classification

References