CVE-2020-7269 MEDIUM

CVE-2020-7269: Sensitive Information Exposure in McAfee ATD

Vendor Mcafee,Llc
Product McAfee Advanced Threat Defense (ATD)
Weakness CWE-200 · Info exposure
Published April 15, 2021
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

4.9/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.

Key dates

02Disclosure timeline

April 15, 2021 CVE published
August 4, 2024 Record updated