Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-7269

Опубликовано: 15 апр. 2021
Источник: nvd
CVSS3: 4.9
CVSS3: 4.3
CVSS2: 4
EPSS Низкий

Описание

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:*
Версия до 4.12.2 (исключая)

EPSS

Процентиль: 26%
0.00088
Низкий

4.9 Medium

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 4.3
github
больше 3 лет назад

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.

EPSS

Процентиль: 26%
0.00088
Низкий

4.9 Medium

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200
NVD-CWE-noinfo