CVE-2019-3662: Advanced Threat Defense (ATD) - Path Traversal: '/absolute/pathname/here' vulnerability
Published Nov 13, 2019
·Updated
Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to gain unintended access to files on the system via carefully constructed HTTP requests.
Affected Software
1 affected component
Mcafee Advanced Threat Defense<4.8
Event History
Nov 13, 2019
CVE Published
via MITRE·11:45 PM
Data Sourced
via MITRE·11:45 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2019-3662.
2
What is the title of this vulnerability?
The title of this vulnerability is 'Path Traversal: /absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8.'
3
What is the severity of CVE-2019-3662?
The severity of CVE-2019-3662 is medium with a CVSS score of 6.5.
4
How does CVE-2019-3662 impact McAfee Advanced Threat Defense?
CVE-2019-3662 allows a remote authenticated attacker to gain unintended access to files on the system through carefully constructed HTTP requests.
5
How can I fix CVE-2019-3662 in McAfee Advanced Threat Defense?
To fix CVE-2019-3662 in McAfee Advanced Threat Defense, you should update to version 4.8 or later.