CVE-2017-4057: High severity mcafee advanced threat defense vulnerability
Published Jul 12, 2017
·Updated
Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI terminal commands.
Affected Software
4 affected components
Mcafee Advanced Threat Defense=3.4
Mcafee Advanced Threat Defense=3.6
Mcafee Advanced Threat Defense=3.8
Mcafee Advanced Threat Defense=3.10
Remediation
Event History
Jul 12, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-4057?
CVE-2017-4057 has been identified as a privilege escalation vulnerability.
2
How do I fix CVE-2017-4057?
To remediate CVE-2017-4057, ensure that you apply the necessary patches provided by McAfee for all affected versions.
3
Which versions of McAfee Advanced Threat Defense are affected by CVE-2017-4057?
CVE-2017-4057 affects McAfee Advanced Threat Defense versions 3.4, 3.6, 3.8, and 3.10.
4
Who can exploit CVE-2017-4057?
Remote authenticated users can exploit CVE-2017-4057 to gain elevated privileges through the GUI.
5
What does CVE-2017-4057 allow attackers to do?
CVE-2017-4057 allows attackers to gain elevated privileges on the McAfee Advanced Threat Defense system.