CVE-2019-3661: Advanced Threat Defense (ATD) - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute database commands via carefully constructed time based payloads.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-3661?
CVE-2019-3661 is a vulnerability found in McAfee Advanced Threat Defense (ATD) prior to version 4.8 that allows remote authenticated attackers to execute database commands through SQL Injection.
How severe is CVE-2019-3661?
CVE-2019-3661 has a severity rating of 8.8 (high).
What is SQL Injection?
SQL Injection is a type of attack that allows malicious users to execute arbitrary SQL commands on a vulnerable website or application.
How can I fix CVE-2019-3661?
To fix CVE-2019-3661, you should update McAfee Advanced Threat Defense to version 4.8 or above.
Where can I find more information about CVE-2019-3661?
You can find more information about CVE-2019-3661 on McAfee's official website: https://kc.mcafee.com/corporate/index?page=content&id=SB10304