CVE-2017-4052

Critical

Published: 12/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-4052 is an authentication bypass vulnerability in the web interface of McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4. Remote unauthenticated users can change or update configuration settings and gain administrator functionality via a crafted HTTP request parameter.

Risk Assessment

The organization is at risk of unauthorized changes to the system configuration, which could lead to serious security breaches and loss of control over the system.

Recommendation

It is recommended to update to the latest version of McAfee Advanced Threat Defense and implement additional security measures to restrict access to the web interface.

Original NVD description (English source)

Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to change or update any configuration settings, or gain administrator functionality via a crafted HTTP request parameter.